Security | ATO Compliance Lead

i360technologies•Gaithersburg, MD

1d•Remote

About The Position

The Opportunity At i360technologies, we specialize in business consulting and technology services for federal agencies. We are seeking a Security / ATO Compliance Lead to be responsible for overseeing cybersecurity compliance alignment, continuous monitoring, and Authority-to-Operate (ATO) lifecycle support for a large-scale federal financial modernization initiative. This role ensures alignment with FedRAMP Moderate, FISMA, and NIST SP 800-53 Moderate security controls and supports Risk Management Framework (RMF) implementation activities, operating in a Moderate-impact federal cloud environment supporting multi-agency financial systems modernization.

Requirements

Minimum seven (7) years of federal cybersecurity compliance experience.
Demonstrated experience supporting FedRAMP Moderate systems.
Strong working knowledge of NIST SP 800-53 Moderate, NIST SP 800-37 (RMF), and FISMA compliance requirements.
Experience managing POA&M documentation.
Experience supporting ATO packages, renewals, and ongoing compliance activities; experience coordinating with federal security stakeholders.
U.S. Citizenship or Lawful Permanent Residency with a minimum of three (3) years of U.S. residency
Successful completion of a Moderate Risk background investigation and FBI fingerprinting
Eligibility to obtain and maintain an HSPD-12 Personal Identity Verification (PIV) credential
Execution of a Non-Disclosure Agreement (NDA)
Compliance with Bureau of the Fiscal Service Security Rules of Behavior
Completion of required cybersecurity and privacy awareness training
Work must be performed within the United States (remote access from foreign locations is not permitted)

Nice To Haves

CISSP, CISM, or equivalent cybersecurity certification.
Experience supporting CFO Act agencies.
Experience in federal financial system environments.

Responsibilities

Lead review and validation of NIST SP 800-53 Moderate control implementation; ensure alignment with Risk Management Framework (NIST SP 800-37).
Maintain and update System Security Plan (SSP) documentation.
Support FedRAMP Moderate compliance requirements; ensure alignment with client security policies; support FISMA compliance activities.
Maintain and manage Plan of Action & Milestones (POA&M); track vulnerability remediation activities.
Coordinate corrective action planning; support risk identification and mitigation strategies.
Develop and support continuous monitoring strategy; review vulnerability scan outputs and assessment findings.
Track remediation status and reporting requirements; support periodic security control assessments.
Support preparation and maintenance of ATO documentation packages; assist with evidence collection and documentation updates.
Coordinate with agency ISSOs, security officials, and 3PAO assessors; support audit readiness and compliance reviews.