SUMMARY
The Senior ISSO manages the security, compliance, and risk authorization process for the DevSecOps software factory platform. This role requires a practical, technically minded lead who understands how to manage security boundaries, evaluate technical risks, and collaborate effectively with engineering and tenant teams. As the ISSO, you will support the Information Assurance (IA) team, serving as the primary security advisor to the Information Assurance Lead. You will have oversight of our security boundaries, manage our secure data transfer pathways, and ensure our pipelines align with established security baselines.
Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays.
As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.
ESSENTIAL REQUIREMENTS
The ability to obtain, maintain and access classified information at the Top Secret/SCI level, which requires U.S. Citizenship.
DoD 8570 IAM/IA Technical (IAT) Level II certification
Excellent written and verbal communication for technical documentation and stakeholder engagement
KEY DUTIES AND RESPONSIBILITIES
Essential duties and responsibilities include the following. Other duties may be assigned.
Execute and manage all Risk Management Framework (RMF) processes for Assessment & Authorization (A&A) to maintain the platform's authorization state.
Develop, maintain, and update the System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and Authorization-to-Operate (ATO) artifacts directly within the official eMASS repository.
Conduct Independent Verification and Validation (IV&V) on all vulnerability scanning. Use ACAS and the IAVM/DTO process to monitor, track, and verify technical patching and remediation efforts.
Implement and validate the security controls mandated by NIST SP 800-53 Rev 5 and CNSSI 1253 Rev 5. Support and verify the technical hardening, patching, and STIG compliance for all operating systems (Linux/Windows) and network devices within our boundary.
Conduct critical Security Impact Assessments (SIAs) and Risk Assessments (RAs) on all proposed platform or system changes (such as new tenant onboardings or API integrations) to evaluate security risks prior to implementation.
Monitor system logs, assist with incident response activities, and ensure our continuous monitoring and compliance dashboards are accurately maintained.
Partner closely with our Lead Architect/Engineer, system administrators DevSecOps teams to ensure security is integrated into our pipelines and that they understand our security requirements.
EDUCATION AND EXPERIENCE
Bachelor's degree in Computer Science or related field and a minimum of five (5) years’ relevant experience. 5 to 8+ years of direct, hands-on experience working with the NIST Special Publications (specifically NIST 800-53 and CNSSI 1253), the DoD Risk Management Framework (RMF) processes, and eMASS.
PHYSICAL DEMANDS
EOE including Disability/Vet
The estimated pay range for this role is $105K to $115K, with the final offer contingent on location, skillset, and experience.
CNI offers a comprehensive benefits package that includes:
Medical
Dental
Vision
401(k)
Family Planning/Fertility Assistance
STD/LTD/Basic Life/AD&D
Legal-Aid Program
Employee Assistance Program (EAP)
Paid Time Off (PTO) – (11) Federal Holidays
Training and Development Opportunities
Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).
#INDCNI
Skills Required
- U.S. Citizenship and ability to obtain, maintain, and access Top Secret/SCI classified information
- DoD 8570 IAM/IA Technical (IAT) Level II certification
- Bachelor's degree in Computer Science or related field
- Minimum of five (5) years' relevant experience
- 5 to 8+ years of direct, hands-on experience with NIST SP 800-53, CNSSI 1253, DoD RMF, and eMASS
- Experience executing RMF Assessment & Authorization (A&A) and maintaining ATO artifacts (SSP, POA&Ms, SARs)
- Experience with vulnerability scanning and Independent Verification & Validation (IV&V), including ACAS and IAVM/DTO processes
- Experience implementing and verifying security controls, STIG compliance, and hardening for Linux, Windows, and network devices
- Excellent written and verbal communication for technical documentation and stakeholder engagement
What We Do
Canadian National Railway Co. engages in rail and related transportation business. Its services include rail, intermodal, trucking, supply chain services, business development, and maps & network. Its offers their services in automotive, coal, fertilizer, food & beverages, forest products, dimensional loads, grain, metals & minerals, and petroleum & chemicals industries.
