*Please note, that this position is contingent upon the award or funding. The essential duties, experience, education requirements, and salary are subject to change.*
The RMF/Information System Security Officer (ISSO) is responsible for supporting the security, compliance, and integrity of information systems by implementing cybersecurity best practices and ensuring adherence to organizational, federal, and customer security requirements. This role collaborates with technical and program teams to identify and mitigate security risks, maintain system compliance, support security assessments, and promote the protection of sensitive information throughout the system lifecycle. This expert is responsible for guiding IT systems through the entire Risk Management Framework (RMF) lifecycle to achieve and maintain the Authority to Operate (ATO).
Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.
As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.
ESSENTIAL REQUIREMENTS
The ability to obtain, maintain and access classified information at the Top Secret level.
CompTIA Security+ certification is required and must be maintained throughout the duration of employment.
Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), and security compliance checkers (e.g., SCAP)
COMSEC experience required.
ESSENTIAL DUTIES AND RESPONSIBILITIES
Essential Duties and responsibilities include the following. Other duties may be assigned.
RMF Execution: Lead all aspects of the RMF process, from system categorization and security control selection to implementation and assessment.
Security Documentation: Develop, maintain, and update all required RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
eMASS Management: Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring all data is accurate and up to date.
Continuous Monitoring: Implement and manage a robust continuous monitoring strategy to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
Stakeholder Coordination: Serve as the primary security advisor to the system owner and liaise with the Authorizing Official (AO) and other key stakeholders to ensure a clear understanding of system risks and compliance status.
EDUCATION AND EXPERIENCE
A Bachelor’s degree from an accredited institution in Information Technology, Cybersecurity, Business Management, or a related field; or experience equal to. Minimum 5+ years of hands-on experience dedicated to applying RMF to complex DoD IT systems.
PHYSICAL DEMANDS
Work is primarily performed in an office environment. Regularly required to sit. Regularly required use hands to finger, handle, or feel, reach with hands and arms to handle objects and operate tools, computer, and/or controls. Required to speak and hear. Occasionally required to stand, walk and stoop, kneel, crouch, or crawl. Must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, and ability to adjust focus. Exposed to general office noise with computers printers and light traffic.
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job.
EOE including Disability/Vet
The estimated pay range for this role is $95,000 to $125,000, with the final offer contingent on location, skillset, and experience.
CNI offers a comprehensive benefits package that includes:
Medical
Dental
Vision
401(k)
Family Planning/Fertility Assistance
STD/LTD/Basic Life/AD&D
Legal-Aid Program
Employee Assistance Program (EAP)
Paid Time Off (PTO)
Training and Development Opportunities
Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).
#INDCNI
Skills Required
- Ability to obtain, maintain, and access Top Secret classified information
- CompTIA Security+ certification (must be maintained)
- Demonstrated mastery of eMASS
- Experience with vulnerability scanning tools (e.g., ACAS, Nessus)
- Experience with security compliance checkers (e.g., SCAP)
- COMSEC experience
- Bachelor's degree in IT, Cybersecurity, Business Management, or related field; or equivalent experience
- Minimum 5+ years hands-on experience applying RMF to complex DoD IT systems
What We Do
Chickasaw Nation Industries (CNI) is a holding company that manages a diverse portfolio of subsidiaries providing specialized services to federal government agencies and commercial clients.
