The Senior ISSO manages the security, compliance, and risk authorization process for the DevSecOps software factory platform. This role requires a practical, technically minded lead who understands how to manage security boundaries, evaluate technical risks, and collaborate effectively with engineering and tenant teams. As the ISSO, you will support the Information Assurance (IA) team, serving as the primary security advisor to the Information Assurance Lead. You will have oversight of our security boundaries, manage our secure data transfer pathways, and ensure our pipelines align with established security baselines.

ESSENTIAL REQUIREMENTS

The ability to obtain, maintain and access classified information at the Top Secret/SCI level, which requires U.S. Citizenship.

DoD 8570 IAM/IA Technical (IAT) Level II certification

Excellent written and verbal communication for technical documentation and stakeholder engagement

KEY DUTIES AND RESPONSIBILITIES

Essential duties and responsibilities include the following. Other duties may be assigned.

Execute and manage all Risk Management Framework (RMF) processes for Assessment & Authorization (A&A) to maintain the platform's authorization state.

Develop, maintain, and update the System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Security Assessment Reports (SARs), and Authorization-to-Operate (ATO) artifacts directly within the official eMASS repository.

Conduct Independent Verification and Validation (IV&V) on all vulnerability scanning. Use ACAS and the IAVM/DTO process to monitor, track, and verify technical patching and remediation efforts.

Implement and validate the security controls mandated by NIST SP 800-53 Rev 5 and CNSSI 1253 Rev 5. Support and verify the technical hardening, patching, and STIG compliance for all operating systems (Linux/Windows) and network devices within our boundary.

Conduct critical Security Impact Assessments (SIAs) and Risk Assessments (RAs) on all proposed platform or system changes (such as new tenant onboardings or API integrations) to evaluate security risks prior to implementation.

Monitor system logs, assist with incident response activities, and ensure our continuous monitoring and compliance dashboards are accurately maintained.

Partner closely with our Lead Architect/Engineer, system administrators DevSecOps teams to ensure security is integrated into our pipelines and that they understand our security requirements.

EDUCATION AND EXPERIENCE

Bachelor's degree in Computer Science or related field and a minimum of five (5) years’ relevant experience. 5 to 8+ years of direct, hands-on experience working with the NIST Special Publications (specifically NIST 800-53 and CNSSI 1253), the DoD Risk Management Framework (RMF) processes, and eMASS.

PHYSICAL DEMANDS

The estimated pay range for this role is $105K to $115K, with the final offer contingent on location, skillset, and experience.  

CNI offers a comprehensive benefits package that includes:

• Medical 

• Dental 

• Vision 

• 401(k) 

• Family Planning/Fertility Assistance 

• STD/LTD/Basic Life/AD&D 

• Legal-Aid Program 

• Employee Assistance Program (EAP) 

• Paid Time Off (PTO) – (11) Federal Holidays 

• Training and Development Opportunities 

Your application submission will be considered for all potential employment opportunities with Chickasaw Nation Industries (CNI). 

#INDCNI