Information System Security Manager

The Information System Security Manager (ISSM) provides enterprise‑level cybersecurity management, oversight, and leadership for Department of the Air Force Financial Management (DAF FM) systems. The ISSM ensures compliant implementation of cybersecurity policy, oversees the Risk Management Framework (RMF) lifecycle, guides the development and maintenance of authorization artifacts, and supports the Authorizing Official (AO) with risk‑based decision materials. This role leads cybersecurity governance and collaborates closely with system owners, ISSOs, engineers, and program management staff to maintain security posture across all mission‑critical FM systems.

ESSENTIAL REQUIREMENTS

The ability to obtain, maintain and access classified information at the Secret level.

Required Certification at the DoD 8140 WRC 722, Advanced level - CISSP, CISSP-ISSMP, CISM, GCIH, GICSP, or GSLC.

Must comply with Air Force cybersecurity directives, including IAVA, TCNO, and NOTAM implementation and verification requirements

ESSENTIAL DUTIES AND RESPONSIBILITIES

• Essential Duties and responsibilities include the following. Other duties may be assigned.
• Lead and oversee the RMF lifecycle across all DAF FM systems, ensuring security control implementation, assessment preparation, and continuous monitoring compliance
• Provide enterprise cybersecurity program guidance to the AO, AODR, ISSOs, and system owners to ensure compliant application of DoD, federal, and Air Force cybersecurity policies.
• Manage and review all FM security authorization artifactsincluding SSPs, RARs, POA&Ms, and supporting documentationin eMASS and ITIPS.
• Oversee enterprise vulnerability and risk management, including analysis of findings, mitigation strategy development, and remediation coordination across multiple FM systems.
• Prepare and deliver riskinformed decision packages for the AO (ATO, ATO with Conditions, Denial), including mission impact analysis and risk justification.
• Coordinate cybersecurity governance activities, lead technical briefings, and provide updates to FM leadership on enterprise cyber posture and authorization status.
• Ensure secure implementation of system modifications and verify cybersecurity impact following engineering changes.
• Mentor and guide ISSOs, cybersecurity analysts, and engineering staff in RMF processes, security control requirements, and compliance procedures.

EDUCATION AND EXPERIENCE

Bachelorsdegree and a minimum oftwelve (12) or moreyearsrelated experience, or equivalent combination of education/experience.

PHYSICAL DEMANDS

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Work is primarily performed in an office/warehouse setting. Regularly required to use hands to finger, handle, or feel.Regularly required to reach with hands and arms, occasionally above head. Regularly required to twist at the waist, climb and descend stairs while carrying objects. Ability to speak and hear. Frequently required to stand, walk, stoop, kneel, crouch or crawl. Occasionally required to sit and climb or balance. Regularly lifts and/or moves up to twenty-five pounds and occasionally lifts and/or moves up to fifty pounds. Works near moving mechanical parts. Regularly exposed to general office and general office machinery noise. May be exposed to warehouse, truck or forklift noise.

CNI offers a comprehensive benefits package that includes:

• Medical
• Dental
• Vision
• 401(k)
• Family Planning/Fertility Assistance
• STD/LTD/Basic Life/AD&D
• Legal-Aid Program
• Employee Assistance Program (EAP)
• Paid Time Off (PTO)
• Training and Development Opportunities

Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI).

#INDCNI