A&A Lead: Federal RMF & ATO Expert

NTT DATA, Inc.; Rockville (MD); On-site; USD 110,000 - 184,000; Full time

Job summary

NTT DATA is seeking an experienced Assessment and Authorization (A&A) Lead to oversee cybersecurity assessment, authorization, and continuous monitoring for federal information systems in Rockville, MD. You will lead a team of five to eight professionals and interact with senior government stakeholders.

The role requires deep RMF/NIST knowledge, ATO lifecycle expertise, and strong leadership, planning, and communication skills.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
• Minimum 8 years of cybersecurity, information assurance, or information system security experience.
• Minimum 5 years of experience supporting federal A&A, ATO, or NIST RMF activities.
• Minimum 5 years of experience managing or leading teams of Security Control Assessors, ISSOs, or cybersecurity analysts.
• Minimum 5 years of experience to include NIST RMF, SP 800-37/53/53A/30, FISMA, and continuous monitoring practices.
• Candidates must hold at least one of CISSP or CISM certifications.
• Ability to obtain a Public Trust.

Responsibilities

• Lead the end-to-end A&A and ATO process for federal information systems.
• Manage and mentor a team of five to eight Security Control Assessors and ISSOs.
• Develop and maintain integrated ATO schedules, milestones, priorities, and resource assignments.
• Coordinate security authorization activities with system owners and stakeholders.
• Apply the NIST RMF throughout the development and authorization lifecycle.
• Review and validate security documentation (SSPs, SAPs, SARs, POA&Ms, risk assessments).
• Oversee security control assessments and ensure findings are evidenced and risk-rated.
• Monitor remediation activities and close POA&Ms in a timely manner.
• Conduct QA reviews of A&A packages before submission to the Authorizing Official.
• Identify risks and communicate with leadership; establish standard A&A procedures and templates.
• Facilitate status meetings and authorization-readiness reviews.
• Support continuous monitoring, annual assessments, and authorization renewals.

Skills

Team leadership

A&A governance

RMF knowledge

NIST SP 800-series

Stakeholder communication

Risk assessment

Project planning

Education

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or related

Tools

CSAM

JCAM

ServiceNow GRC

Job description

NTT DATA is seeking an experienced Assessment and Authorization (A&A) Lead to oversee cybersecurity assessment, authorization, and continuous monitoring for federal information systems in Rockville, MD. You will lead a team of five to eight professionals and interact with senior government stakeholders.

The role requires deep RMF/NIST knowledge, ATO lifecycle expertise, and strong leadership, planning, and communication skills.