Senior RMF/Information System Security Officer

Chickasaw Nation Industries•Huntsville, AL

5d•Onsite

About The Position

The Senior RMF/ISSO is responsible for leading cybersecurity compliance and information assurance activities in accordance with the NIST Risk Management Framework (RMF) and Department of Defense (DoD) cybersecurity requirements. This role oversees the security authorization lifecycle, ensures compliance with applicable federal regulations and security controls, manages accreditation documentation, conducts risk assessments, and serves as the primary cybersecurity advisor to program leadership, system owners, and government stakeholders. The Senior RMF/ISSO supports the protection of information systems by maintaining Authorization to Operate (ATO) packages, implementing continuous monitoring strategies, and ensuring compliance with DoD, NIST, and organizational security policies. Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people.

Requirements

Ability to obtain, maintain and access classified information at the Top Secret level.
CompTIA Security+ certification is required and must be maintained throughout the duration of employment.
Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), and security compliance checkers (e.g., SCAP).
Proven hands-on skills in network and system administration, troubleshooting, COMSEC, and customer support within a secure environment.
A Bachelor’s degree from an accredited institution in Information Technology, Cybersecurity, Business Management, or a related field; or experience equal to.
Minimum of 8+ years of progressive experience in managing complex IT programs for the Department of Defense (DoD), with a proven track record of managing projects of similar size, scope, and complexity.
Experience must include budget oversight, staff management, and subcontractor coordination.

Nice To Haves

PMP certification is preferred

Responsibilities

Serve as the primary interface with the Government Lead, keeping them informed of all program activities, risks, and performance metrics.
Develop and execute a comprehensive Program Management Plan that outlines project scope, schedule, budget, and quality control measures to ensure all PWS requirements are met or exceeded.
Direct and control all contractor activities, ensuring the optimal allocation of personnel and resources.
Oversee staffing to guarantee all positions are filled with qualified individuals who meet the PWS requirements.
Assume full responsibility for the program's financial performance.
Proactively identify, document, and mitigate program risks, and provide timely issue resolution and corrective action plans.
Ensure all contract deliverables are submitted on time and meet the highest standards of quality and accuracy.
Lead cybersecurity compliance and information assurance activities in accordance with the NIST Risk Management Framework (RMF) and Department of Defense (DoD) cybersecurity requirements.
Oversee the security authorization lifecycle.
Ensure compliance with applicable federal regulations and security controls.
Manage accreditation documentation.
Conduct risk assessments.
Serve as the primary cybersecurity advisor to program leadership, system owners, and government stakeholders.
Support the protection of information systems by maintaining Authorization to Operate (ATO) packages.
Implement continuous monitoring strategies.
Ensure compliance with DoD, NIST, and organizational security policies.