Information System Security Manager

Chickasaw Nation Industries; Dayton (OH); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance

Life Insurance

Disability Insurance

401(k) Immediate vesting

Professional Development Assistance

Legal Aid Assistance Program

Family Planning / Fertility Assistance

Personal Time Off

Federal Holidays observance

Job summary

Chickasaw Nation Industries (CNI) is seeking an Information System Security Manager (ISSM) to provide enterprise-level cybersecurity management for DoD FM systems. You will oversee RMF lifecycle, guide authorization artifacts and support the AO with risk-based materials, collaborating with system owners, ISSOs, engineers, and program management to sustain secure mission-critical FM systems.

Responsibilities include governance, artifact review in eMASS/ITIPS, risk analysis and briefing leadership

Qualifications

• Ability to obtain, maintain and access classified information at the Secret level.
• Required certification at the DoD 8410 WRC 722 Advanced level (CISSP, CISSP-ISSMP, CISM, GCIH, GICSP, GSLC).
• Must comply with Air Force cybersecurity directives (IAVA, TCNO, NOTAM).

Responsibilities

• Lead RMF lifecycle across all DAF FM systems with security control implementation and continuous monitoring.
• Provide enterprise cybersecurity program guidance to AO/AODR/ISSO and system owners.
• Manage and review FM security artifacts (SSPs, RARs, POA&Ms) in eMASS and ITIPS.
• Oversee vulnerability and risk management with mitigation and coordination.
• Prepare risk-informed decision packages for AO (ATO/ATO with Conditions/Denial).
• Coordinate governance activities and brief FM leadership on cyber posture and status.
• Ensure secure implementation of system modifications and assess cybersecurity impact of changes.
• Mentor ISSOs, analysts, and engineers in RMF processes and compliance.

Skills

Cybersecurity leadership

RMF lifecycle

Policy compliance

Stakeholder coordination

DoD cybersecurity standards

Education

Bachelor's degree or equivalent experience

12+ years IT/cybersecurity/systems engineering

DoD 8410 WRC 722 Advanced level

CISSP

CISSP-ISSMP

CISM

GCIH

GICSP

GSLC

Tools

eMASS

ITIPS

Job description

*Please note, that this position is contingent upon the award or funding. The essential duties, experience, education requirements, and salary are subject to change.*

The Information System Security Manager (ISSM) provides enterprise‑level cybersecurity management, oversight, and leadership for Department of the Air Force Financial Management (DAF FM) systems. The ISSM ensures compliant implementation of cybersecurity policy, oversees the Risk Management Framework (RMF) lifecycle, guides the development and maintenance of authorization artifacts, and supports the Authorizing Official (AO) with risk‑based decision materials. This role leads cybersecurity governance and collaborates closely with system owners, ISSOs, engineers, and program management staff to maintain security posture across all mission‑critical FM systems.

Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long‑term viability of the Chickasaw Nation and its people.

Benefits

• Medical - Dental – Vision
• Company Life Insurance
• Short-Term and Long-Term Disability Insurance
• 401(K) Immediate Vesting
• Professional Development Assistance
• Legal Aid Assistance Program
• Family Planning / Fertility Assistance
• Personal Time Off
• Observance of Federal Holidays

Essential Requirements

• The ability to obtain, maintain and access classified information at the Secret level.
• Required Certification at the DoD 8410 WRC 722, Advanced level - CISSP, CISSP-ISSMP, CISM, GCIH, GICSP, or GSLC.
• Must comply with Air Force cybersecurity directives, including IAVA, TCNO, and NOTAM implementation and verification requirements.

Essential Duties and Responsibilities

• Lead and oversee the RMF lifecycle across all DAF FM systems, ensuring security control implementation, assessment preparation, and continuous monitoring compliance
• Provide enterprise cybersecurity program guidance to the AO, AODR, ISSOs, and system owners to ensure compliant application of DoD, federal, and Air Force cybersecurity policies.
• Manage and review all FM security authorization artifacts—including SSPs, RARs, POA&Ms, and supporting documentation in eMASS and ITIPS.
• Oversee enterprise vulnerability and risk management, including analysis of findings, mitigation strategy development, and remediation coordination across multiple FM systems.
• Prepare and deliver risk‑informed decision packages for the AO (ATO, ATO with Conditions, Denial), including mission impact analysis and risk justification.
• Coordinate cybersecurity governance activities, lead technical briefings, and provide updates to FM leadership on enterprise cyber posture and authorization status.
• Ensure secure implementation of system modifications and verify cybersecurity impact following engineering changes.
• Mentor and guide ISSOs, cybersecurity analysts, and engineering staff in RMF processes, security control requirements, and compliance procedures.

Education and Experience

Bachelors Degree or equivalent experience and twelve (12) years of relevant IT/cybersecurity/systems engineering experience.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Work is primarily performed in an office/warehouse setting. Regularly required to use hands to finger, handle, or feel. Regularly required to reach with hands and arms, occasionally above head. Regularly required to twist at the waist, climb and descend stairs while carrying objects. Ability to speak and hear. Frequently required to stand, walk, stoop, kneel, crouch or crawl. Occasionally required to sit and climb or balance. Regularly lifts and/or moves up to twenty‑five pounds and occasionally lifts and/or moves up to fifty pounds. Works near moving mechanical parts. Regularly exposed to general office and general office machinery noise. May be exposed to warehouse, truck or forklift noise.

EEO

EoE including Disability/Vet CNI offers a comprehensive benefits package that includes: Medical Dental Vision 401(k) Family Planning/Fertility Assistance STD/LTD/Basic Life/AD&D Legal-Aid Program Employee Assistance Program (EAP) Paid Time Off (PTO) Training and Development Opportunities

Chickasaw Nation Industries, Inc. (CNI) is a federally chartered corporation wholly owned by the Chickasaw Nation.

Headquartered in Norman, Oklahoma, CNI serves as a holding company with multiple subsidiaries that operate as Limited Liability Companies (LLCs) engaged in several lines of business including Civilian, Defense, Filtration, Network Services, and Research, Development, Test and Evaluation.

CNI supports a diverse culture that offers innovative approaches and customer-centred services.

When you do business with us, you gain efficient and cost-effective solutions that help safeguard the environment, protect and secure key assets, and connect resources to needs.

We are proud to support the economic development of the Chickasaw Nation and to contribute to the tribal mission of enhancing the overall quality of life of the Chickasaw people.

A portion of our profits is used to support Chickasaw citizens through a multitude of programs and services such as education, health care, nutrition services, housing programs, legal services, elder and child care and community support programs.

Successful economic development is an integral part of the Chickasaw Nation’s operations.