Information System Security Manager
About the role
The Information System Security Manager (ISSM) provides enterprise‑level cybersecurity management, oversight, and leadership for Department of the Air Force Financial Management (DAF FM) systems. The ISSM ensures compliant implementation of cybersecurity policy, oversees the Risk Management Framework (RMF) lifecycle, guides the development and maintenance of authorization artifacts, and supports the Authorizing Official (AO) with risk‑based decision materials. This role leads cybersecurity governance and collaborates closely with system owners, ISSOs, engineers, and program management staff to maintain security posture across all mission‑critical FM systems. Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people.
Responsibilities
- Lead and oversee the RMF lifecycle across all DAF FM systems, ensuring security control implementation, assessment preparation, and continuous monitoring compliance
- Provide enterprise cybersecurity program guidance to the AO, AODR, ISSOs, and system owners to ensure compliant application of DoD, federal, and Air Force cybersecurity policies.
- Manage and review all FM security authorization artifacts—including SSPs, RARs, POA&Ms, and supporting documentation—in eMASS and ITIPS.
- Oversee enterprise vulnerability and risk management, including analysis of findings, mitigation strategy development, and remediation coordination across multiple FM systems.
- Prepare and deliver risk‑informed decision packages for the AO (ATO, ATO with Conditions, Denial), including