Chickasaw Nation Industries, Inc.

• Provide scientific and technical support for health-related research, programs, and initiatives • Analyze and interpret scientific data • Support research and program activities • Prepare technical documentation • Collaborate with project teams and stakeholders to meet program objectives

• Provides scientific and technical support for health-related research, programs, and initiatives • Analyzes and interprets scientific data, supporting research and program activities • Prepares technical documentation, and collaborates with project teams and stakeholders to meet program objectives while ensuring compliance with applicable federal requirements

• Provide research support and analyze information sources • Produce reports to assist decision making • Provide technical assistance for clients and research recipients • Analyze and evaluate programs and recommend improvements • Make clear presentations and interact with public health organizations

Role Description The HIPAA Subject Matter Expert supports the Health and Human Services (HHS), Office for Civil Rights (OCR) promoting the right to access health information and protection of the privacy and security of this information. These highly trained and highly skilled consultants and analysts are integral to the success and performance of OCR and to further OCR’s mission. Qualifications - Minimum educational experience is a Bachelor’s degree from an accredited university with a focus on Cybersecurity, Computer Science, Information Sciences, or other comparable fields of study. - Preference will be given to candidates with relevant industry certifications from CISSP, CISM, CIPP/CIPT/CIPT. Requirements - Must be able to obtain and maintain the required customer clearance for access to systems, facilities, equipment, and property. - Ten (10) years of relevant cybersecurity experience is preferred. - Experience in auditing and generating audit reports is required. - Fundamental knowledge of basic systems analysis. - Knowledge of a broad range of relevant computer systems, applications, and/or related equipment. - Knowledge of computer security procedures and protocol. - Basic knowledge of advanced operating system, network, or application management tasks. - Knowledge of current technological developments/trends in area of expertise. - Knowledge of federal copyright laws as they pertain to the use of computer software. - Ability to integrate emerging technologies and applications into the current environment and to identify technical specifications to meet user needs including operating system and network or application configuration. - Skills in planning, organizing, and adapting within a multi-tasking environment. - Strong interpersonal skills, flexibility, and customer service orientation. - Ability to gather facts and data for technical proposals and to expand upon them or develop alternatives and to evaluate emerging technologies and identify their potential impact within the existing environment. - Ability to analyze complex computer problems and provide solutions. - Ability to communicate effectively, both orally and in writing. - Ability to communicate technical information to non-technical personnel. - Ability to develop and deliver presentations. Key Duties and Responsibilities - Reviews security and privacy complaints, data breach notification and cybersecurity incident reports and other correspondence and evidence to determine whether complaints, self-reported breaches or breach notification reports indicate non-compliance with the HIPAA Security Rule. - Evaluates and determines the technical sufficiency of submissions from HIPAA covered entities and business associates in response to data and documentation requests. - Documents processes, standard operating procedures and system requirements; develops reports summarizing the analysis along with formulating recommendations for OCR to consider for future action. - Develops written reports with technical security analyses, summaries, and recommendations for action, reports on root causes of problems, efficiency, and support needs. - Provides expertise in the development and evaluation of health information privacy policies and technologies, specifically regarding protected health information; deidentified/re-identified health information; limited data sets. - Provides subject matter expert analysis, evaluation, and recommendations based on national security standards (NIST), industry best practices from the International Organization for Standardization and implementation specifications of the HIPAA Security Rule. - Provides DIN designing, implementing, and managing information security, data protection, and risk management programs, including policies, procedures, and controls for protected health information based on HIPAA requirements. - Provides advisory expertise in the areas of risk analyses, vulnerability assessments, incident response, security architecture, physical security, business continuity and disaster recovery, enterprise mobility, threat intelligence and analysis, security awareness and online safety, and resolution of highly complex security projects and issues. - Works well with programmers, developers, content managers, and other key personnel in an interactive development situation. Physical Demands Work is primarily performed in an office environment. Regularly required to sit. Regularly required use hands to finger, handle, or feel, reach with hands and arms to handle objects and operate tools, computer, and/or controls. Required to speak and hear. Occasionally required to stand, walk and stoop, kneel, crouch, or crawl. Must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, and ability to adjust focus. Exposed to general office noise with computers printers and light traffic. The physical demands described here are representative of those that must be met by an employee to perform successfully the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Benefits - Medical - Dental - Vision - 401(k) Immediate Vesting - Professional Development Assistance - Legal Aid Assistance Program - Family Planning/Fertility Assistance - Personal Time Off - Observance of Federal Holidays - Employee Assistance Program (EAP) - Training and Development Opportunities *Please note, that this position is contingent upon the award or funding. The essential duties, experience, education requirements, and salary are subject to change.* The estimated pay range for this role is $125K to $135K, with the final offer contingent on location, skillset, and experience.

• Overseeing and managing the organization’s cyber incident response and operational security activities • Directing response strategies, guiding investigations, and coordinating remediation efforts • Collaborating with cross-functional teams to protect the organization from cyber threats • Developing and implementing effective incident response plans

• Lead the Risk Management Framework (RMF) and Governance, Risk, and Compliance (GRC) programs for the organization. • Develop and maintain policies, procedures, and controls to meet regulatory and organizational security requirements. • Oversee risk assessments, gap analyses, and mitigation strategies for business units. • Coordinate audits and ensure continuous compliance with federal and industry standards. • Report risk status, compliance metrics, and remediation progress to senior leadership. • Educate and advise teams on RMF/GRC practices and requirements.

• Provides high-level expert, professional and consulting services. • Evaluates, designs and implements organizational strategies to maximize the potential for meeting the vision, mission and goals. • Designs and conducts studies at an escalated level, analyses, and research. • Prepares presentations and recommendations. • Develops draft inputs to program / organizational documentation as it relates to any of the operational support functions. • Applicable Operational Areas include: acquisition management, business process reengineering, specialty engineering (e.g., communications, systems safety, quality assurance, test and evaluation, human factors, reliability and maintainability, systems security etc.), organizational planning, acquisition logistics, and configuration support and/or program management. • Applicable Functional Areas include: systems engineering, acquisition management, business process, quality assurance, organizational planning, financial management, acquisition logistics, configuration and data information systems, major enterprise-wide technology deployments, or strategic enterprise infrastructure redesign.

Role Description The Business Analyst supports a government agency in implementing their mission. This position will play a crucial role in the project team, providing expertise in planning, discovery, and implementation in a fast-paced environment. They are responsible for analyzing and documenting requirements and working with the team to develop and deliver system applications. This is a 100% remote position. Must be able to obtain and maintain a Public Trust Clearance for access to systems, facilities, equipment, and property. Qualifications - Minimum 10 years of experience as a Business Analyst, focusing on business systems and associated workflows. - At least 3 years in an Agile environment (Scrum, Kanban, or SAFe). - Hands-on experience with System Development Life Cycle (SDLC), including requirements gathering, analysis, design, testing, and implementation. - Proven ability to collaborate with development teams to translate business requirements into technical specifications. - Experience creating and managing documentation such as business requirement documents (BRDs), system use cases, process flows, and functional requirements. - Familiarity with SQL and database queries for healthcare data analysis is a plus. - Exposure to business intelligence tools (e.g., Power BI, Tableau) is a plus. - Strong problem-solving and analytical skills, with the ability to assess complex workflows and recommend solutions. - Excellent verbal and written communication skills, with the ability to engage with stakeholders at all levels. - Experience working collaboratively in cross-functional teams, including developers, QA teams, and project managers. - Ability to facilitate stakeholder meetings, document discussions, and track action items. Requirements - The ability to obtain, maintain and access classified information at the Public Trust level. Key Duties and Responsibilities - Analyze and document business processes related to mission support workflows, ensuring compliance with industry standards. - Collaborate with stakeholders to define and refine business requirements for interconnected systems and databases. - Develop detailed functional and non-functional requirements for data integration, ensuring accurate exchange of structured data workflows. - Work closely with development and implementation teams to ensure system functionality aligns with business needs, regulatory requirements, and security compliance. - Facilitate stakeholder meetings, document discussions, and track action items to ensure smooth project execution. - Assist with backlog grooming, developing user stories, acceptance criteria, and keeping them updated throughout the project lifecycle. - Support process improvement efforts by identifying inefficiencies in current workflows and recommending enhancements for better data exchange and interoperability. - Develop and maintain documentation such as business requirement documents (BRDs), system use cases, functional requirements, and technical guides. - Ensure data integrity, privacy, and security in all interoperability workflows, working closely with compliance teams to meet regulatory and security requirements. - Develop and maintain flow diagrams, data models, swimlane diagrams, and system user interactions to represent workflows and processes. - Act as a liaison between business users and IT teams, translating business needs into technical specifications and ensuring alignment across all parties. - Support User Acceptance Testing (UAT) by defining test scenarios, reviewing test cases, and validating that implemented solutions meet business requirements. - Participate in Agile processes, including sprint planning, stand-ups, and retrospectives, contributing to iterative development and continuous improvement. Education and Experience - Bachelor’s degree required with a minimum 7-9 years of experience in business analysis, with a focus on business requirements, interoperability, and data exchange. Physical Demands Work is primarily performed in an office environment. Regularly required to sit. Regularly required to use hands to finger, handle, or feel, reach with hands and arms to handle objects and operate tools, computer, and/or controls. Required to speak and hear. Occasionally required to stand, walk and stoop, kneel, crouch, or crawl. Must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, and ability to adjust focus. Exposed to general office noise with computers, printers, and light traffic. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job. Benefits - Medical - Dental - Vision - 401(k) - Family Planning/Fertility Assistance - STD/LTD/Basic Life/AD&D - Legal-Aid Program - Employee Assistance Program (EAP) - Paid Time Off (PTO) - Training and Development Opportunities Salary The estimated pay range for this role is $95,000 to $120,000, with the final offer contingent on location, skillset, and experience. Please note that this position is contingent upon the award or funding. The essential duties, experience, education requirements, and salary are subject to change.

• Designs and develops sophisticated user interfaces • Leads the creation of user personas and comprehensive user research analyses • Develops complex wireframes, prototypes, and high-fidelity designs for multiple platforms • Oversees usability testing, gathers insights, and implements improvements • Drives a user-centric approach in every design decision and project undertaking • Works closely with cross-functional teams to define, align, and execute design solutions • Plays a key role in refining and expanding the company’s design system and style guidelines • Collaborates with stakeholders to present concepts, gather feedback, and iterate designs • Manages multiple projects, ensuring alignment with deadlines, scope, and budgets • Serves as a mentor and guide to develop junior designers and grow their skills

• Provides support to the Department of Health and Human Services, Indian Health Service (IHS) • Responsible for executing and assisting in the completion of security certifications • Provides support in the development and implementation of a program to manage all aspects of compliance with government regulations • Conducts annual security controls effectiveness testing • Documents findings and advises and monitors remediation efforts on all systems • Conducts information security audits/risk assessments on customer systems and network • Assists system owners in developing security authorization packages • Prepares security authorization packages using approved customer templates • Ensures customer information and information systems are adequately protected from unauthorized access, use, disclosure, disruption, modification, or destruction