Information Systems Security Officer

Chickasaw Nation Industries•Rock Island, NV

13d

About The Position

The Information System Security Officer IV (ISSO) provides senior-level cybersecurity support for complex information systems and programs. The role applies advanced knowledge of cybersecurity risk management, security control implementation, and compliance frameworks to help lead security compliance efforts, advise stakeholders on risk and control implementation, and support authorization and continuous monitoring across multiple systems or high-impact environments. The ISSO leads the Risk Management Framework (RMF) process, develops and maintains RMF documentation, manages security posture information in the Enterprise Mission Assurance Support System (eMASS), and implements continuous monitoring. The role serves as the primary security advisor to the system owner and coordinates with the Authorizing Official and other stakeholders. Chickasaw Nation Industries, Inc. is a holding company with subsidiaries serving federal government and commercial enterprises across business services, health, infrastructure and engineering, mission optimization, technology, and transportation. A portion of its profits supports Chickasaw citizens and the economic development and long-term viability of the Chickasaw Nation and its people. CNI is a drug-free federal contractor.

Requirements

Ability to obtain, maintain, and access classified information at the Top Secret/SCI level; U.S. citizenship is required.
Required DoD 8570 IAT Level II certification.
Advanced knowledge of cybersecurity risk management, control implementation, and compliance frameworks.
Significant experience supporting authorization, assessment, and continuous monitoring activities.
Ability to evaluate complex technical environments and communicate risk clearly.
Bachelor’s degree and a minimum of seven or more years of related experience, or an equivalent combination of education and experience. The posting also parenthetically states “(5+)” years.

Responsibilities

Lead all aspects of the RMF process, including system categorization, security control selection, implementation, and assessment.
Develop, maintain, and update required RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
Manage the system’s security posture within eMASS and ensure its data is accurate and up to date.
Implement and manage a continuous monitoring strategy to assess security control effectiveness, track vulnerabilities, and manage configuration changes.
Serve as the primary security advisor to the system owner and liaise with the Authorizing Official and other key stakeholders.