Information System Security Officer

Chickasaw Nation Industries, Inc.•Ellsworth Air Force Base, SD

6d•Onsite

About The Position

The Information System Security Officer (ISSO) provides system‑level cybersecurity support for Department of the Air Force Financial Management (DAF FM) systems. This role supports RMF compliance, performs security control validation, maintains authorization documentation, and monitors remediation activities across multiple financial management systems. The ISSO collaborates closely with the ISSM, AO staff, system engineers, cybersecurity analysts, and program personnel to ensure system security posture aligns with Air Force cybersecurity directives and RMF requirements. Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people. CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays. As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.

Requirements

The ability to obtain, maintain and access classified information at the Top Secret level.
Required Certification at the DoD 8410 WRC 722, Intermediate level - GMON, SecurityX/CASP+, CCISO, CCSP, CGRC/CAP, CISSO, Cloud+, GSEC, Security+, or SSCP
Must comply with cybersecurity directives, including IAVA, TCNO, and NOTAM implementation, tracking, and validation requirements.

Responsibilities

Support the Risk Management Framework (RMF) lifecycle by assisting with security control implementation, validation, assessment preparation, and continuous monitoring for assigned FM systems
Maintain and update cybersecurity authorization documentation, including SSPs, RARs, and POA&Ms, within eMASS and ITIPS, ensuring accuracy and compliance.
Track and report vulnerability findings and coordinate remediation efforts with system owners and engineering teams.
Assist in preparing authorization decision support materials and contribute to mission impact assessments submitted to the FM Authorizing Official (AO).
Conduct system‑level reviews of patching, configuration changes, and security settings to ensure compliance with client directives.
Support cybersecurity assessment events, including security control testing and remediation validation.
Provide day‑to‑day cybersecurity coordination with developers, system administrators, DBAs, and FM program personnel.
Assist the ISSM with enterprise‑level monitoring, reporting, and compliance governance as assigned.