*Please note, that this position is contingent upon the award or funding. The essential duties, experience, education requirements, and salary are subject to change.*
The Information System Security Officer (ISSO) provides system‑level cybersecurity support for Department of the Air Force Financial Management (DAF FM) systems. This role supports RMF compliance, performs security control validation, maintains authorization documentation, and monitors remediation activities across multiple financial management systems. The ISSO collaborates closely with the ISSM, AO staff, system engineers, cybersecurity analysts, and program personnel to ensure system security posture aligns with Air Force cybersecurity directives and RMF requirements.
Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.
As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.
ESSENTIAL REQUIREMENTS
The ability to obtain, maintain and access classified information at the Top Secret level.
Required Certification at the DoD 8410 WRC 722, Intermediate level - GMON, SecurityX/CASP+, CCISO, CCSP, CGRC/CAP, CISSO, Cloud+, GSEC, Security+, or SSCP
Must comply with cybersecurity directives, including IAVA, TCNO, and NOTAM implementation, tracking, and validation requirements.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Essential duties and responsibilities include the following. Other duties may be assigned.
Support the Risk Management Framework (RMF) lifecycle by assisting with security control implementation, validation, assessment preparation, and continuous monitoring for assigned FM systems
Maintain and update cybersecurity authorization documentation, including SSPs, RARs, and POA&Ms, within eMASS and ITIPS, ensuring accuracy and compliance.
Track and report vulnerability findings and coordinate remediation efforts with system owners and engineering teams.
Assist in preparing authorization decision support materials and contribute to mission impact assessments submitted to the FM Authorizing Official (AO).
Conduct system‑level reviews of patching, configuration changes, and security settings to ensure compliance with client directives.
Support cybersecurity assessment events, including security control testing and remediation validation.
Provide day‑to‑day cybersecurity coordination with developers, system administrators, DBAs, and FM program personnel.
Assist the ISSM with enterprise‑level monitoring, reporting, and compliance governance as assigned.
EDUCATION / EXPERIENCE
Bachelor of Science (B.S.) or above, or equivalent combination of IT technical and ten (10) years of relevant experience
PHYSICAL DEMANDS:
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Work is primarily performed in an office/warehouse setting. Regularly required to use hands to finger, handle, or feel. Regularly required to reach with hands and arms, occasionally above head. Regularly required to twist at the waist, climb and descend stairs while carrying objects. Ability to speak and hear. Frequently required to stand, walk, stoop, kneel, crouch or crawl. Occasionally required to sit and climb or balance. Regularly lifts and/or moves up to twenty-five pounds and occasionally lifts and/or moves up to fifty pounds. Works near moving mechanical parts. Regularly exposed to general office and general office machinery noise. May be exposed to warehouse, truck or forklift noise.
EOE including Disability/Vet
CNI offers a comprehensive benefits package that includes:
Medical
Dental
Vision
401(k)
Family Planning/Fertility Assistance
STD/LTD/Basic Life/AD&D
Legal-Aid Program
Employee Assistance Program (EAP)
Paid Time Off (PTO)
Training and Development Opportunities
Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).
#INDCNI
Skills Required
- Ability to obtain, maintain, and access classified information at the Top Secret level.
- DoD 8410 WRC 722 Intermediate-level certification or equivalent (e.g., GMON, SecurityX/CASP+, CCISO, CCSP, CGRC/CAP, CISSO, Cloud+, GSEC, Security+, SSCP).
- Experience supporting the Risk Management Framework (RMF) lifecycle, including security control implementation, validation, assessment preparation, and continuous monitoring.
- Experience creating and maintaining authorization documentation (SSPs, RARs, POA&Ms) in eMASS and ITIPS.
- Experience tracking and reporting vulnerabilities and coordinating remediation with system owners and engineering teams (IAVA, TCNO, NOTAM compliance).
- Bachelor of Science (B.S.) or above, or equivalent combination of IT technical education and ten (10) years of relevant experience.
- Ability to conduct system-level reviews of patching, configuration changes, and security settings and support cybersecurity assessment events.
What We Do
Chickasaw Nation Industries (CNI) is a holding company that manages a diverse portfolio of subsidiaries providing specialized services to federal government agencies and commercial clients.
