The Information System Security Officer IV (ISSO) provides system‑level cybersecurity support for Department of the Air Force Financial Management (DAF FM) systems. This role supports RMF compliance, performs security control validation, maintains authorization documentation, and monitors remediation activities across multiple financial management systems. The ISSO collaborates closely with the ISSM, AO staff, system engineers, cybersecurity analysts, and program personnel to ensure system security posture aligns with Air Force cybersecurity directives and RMF requirements.
Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.
As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.
ESSENTIAL REQUIREMENTS
The ability to obtain, maintain and access classified information at the Secret level.
Required Certification at the DoD 8140 WRC 722, Intermediate level - GMON, SecurityX/CASP+, CCISO, CCSP, CGRC/CAP, CISSO, Cloud+, GSEC, Security+, or SSCP
Must comply with cybersecurity directives, including IAVA, TCNO, and NOTAM implementation, tracking, and validation requirements.
ESSENTIAL DUTIES AND RESPONSIBILITIES
- Essential duties and responsibilities include the following. Other duties may be assigned.
- Support the Risk Management Framework (RMF) lifecycle by assisting with security control implementation, validation, assessment preparation, and continuous monitoring for assigned FM systems
- Maintain and update cybersecurity authorization documentation, including SSPs, RARs, and POA&Ms, within eMASS and ITIPS, ensuring accuracy and compliance.
- Track and report vulnerability findings and coordinate remediation efforts with system owners and engineering teams.
- Assist in preparing authorization decision support materials and contribute to mission impact assessments submitted to the FM Authorizing Official (AO).
- Conduct system‑level reviews of patching, configuration changes, and security settings to ensure compliance with client directives.
- Support cybersecurity assessment events, including security control testing and remediation validation.
- Provide day‑to‑day cybersecurity coordination with developers, system administrators, DBAs, and FM program personnel.
- Assist the ISSM with enterprise‑level monitoring, reporting, and compliance governance as assigned.
EDUCATION AND EXPERIENCE
Bachelor’s degree and a minimum of ten (10) years related experience, or equivalent combination of education/experience.
PHYSICAL DEMANDS:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Work is primarily performed in an office/warehouse setting. Regularly required to use hands to finger, handle, or feel. Regularly required to reach with hands and arms, occasionally above head. Regularly required to twist at the waist, climb and descend stairs while carrying objects. Ability to speak and hear. Frequently required to stand, walk, stoop, kneel, crouch or crawl. Occasionally required to sit and climb or balance. Regularly lifts and/or moves up to twenty-five pounds and occasionally lifts and/or moves up to fifty pounds. Works near moving mechanical parts. Regularly exposed to general office and general office machinery noise. May be exposed to warehouse, truck or forklift noise.
EOE including Disability/Vet
CNI offers a comprehensive benefits package that includes:
- Medical
- Dental
- Vision
- 401(k)
- Family Planning/Fertility Assistance
- STD/LTD/Basic Life/AD&D
- Legal-Aid Program
- Employee Assistance Program (EAP)
- Paid Time Off (PTO)
- Training and Development Opportunities
Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).
#INDCNI
Skills Required
- Ability to obtain, maintain, and access classified information at the Secret level
- DoD 8140 WRC 722 Intermediate-level certification, such as Security+, SSCP, GSEC, CCSP, CASP+, CGRC/CAP, or equivalent listed certification
- Bachelor's degree and at least 10 years of related experience, or equivalent combination of education and experience
- Compliance with cybersecurity directives, including IAVA, TCNO, and NOTAM implementation, tracking, and validation requirements
What We Do
Canadian National Railway Co. engages in rail and related transportation business. Its services include rail, intermodal, trucking, supply chain services, business development, and maps & network. Its offers their services in automotive, coal, fertilizer, food & beverages, forest products, dimensional loads, grain, metals & minerals, and petroleum & chemicals industries.
