ATO Compliance Lead

i360technologies, Inc.; United States; Remote; USD 120,000 - 140,000; Full time

Benefits offered by this job

Referral Bonus

401k Matching

Holidays – Eleven

Technology Reimbursement

Short-Term & Long-Term Disability

Life Insurance (Basic, Voluntary & AD&

Paid Time Off (0-3 years - 15 Days PTO

20 Days)

80% Employer Paid Health Care Plan (MD

Job summary

i360technologies, Inc. seeks a Security / ATO Compliance Lead to oversee cybersecurity compliance alignment, continuous monitoring, and ATO lifecycle support for a large federal modernization initiative.

The role ensures alignment with FedRAMP Moderate, FISMA, and NIST SP 800-53 Moderate controls in a Moderate-impact federal cloud environment. The candidate will coordinate with agency ISSOs and 3PAO assessors, manage POA&M, and support ATO packages and RMF activities to keep the system

Qualifications

• Seven+ years in federal cybersecurity compliance.
• Experience supporting FedRAMP Moderate systems.
• Strong knowledge of NIST SP 800-53 Moderate, RMF (SP 800-37) and FISMA.
• Experience managing POA&M documentation.
• Experience coordinating ATO packages, renewals, and ongoing compliance with federal stakeholders.

Responsibilities

• Lead review and validation of NIST SP 800-53 Moderate control implementation per RMF guidance.
• Maintain and update System Security Plan (SSP) documentation.
• Support FedRAMP Moderate requirements and FISMA compliance activities.
• Maintain and manage POA&M; track remediation activities and status.
• Coordinate with agency ISSOs, security officials, and 3PAO assessors; assist audit readiness.
• Develop and support continuous monitoring; review vulnerability scans and assessment findings.
• Track remediation status and reporting; support security control assessments.
• Assist with ATO documentation packages and evidence collection.

Skills

Federal compliance

FedRAMP Moderate

NIST SP 800-53 Moderate

RMF (NIST SP 800-37)

POA&M management

Security documentation

Job description

The Opportunity

At i360technologies, we specialize in business consulting and technology services for federal agencies. We are seeking a Security / ATO Compliance Lead to be responsible for overseeing cybersecurity compliance alignment, continuous monitoring, and Authority-to-Operate (ATO) lifecycle support for a large-scale federal financial modernization initiative.

This role ensures alignment with FedRAMP Moderate, FISMA, and NIST SP 800-53 Moderate security controls and supports Risk Management Framework (RMF) implementation activities, operating in a Moderate-impact federal cloud environment supporting multi-agency financial systems modernization.

What You Will Do

• Lead review and validation of NIST SP 800-53 Moderate control implementation; ensure alignment with Risk Management Framework (NIST SP 800-37).
• Maintain and update System Security Plan (SSP) documentation.
• Support FedRAMP Moderate compliance requirements; ensure alignment with client security policies; support FISMA compliance activities.
• Maintain and manage Plan of Action & Milestones (POA&M); track vulnerability remediation activities.
• Coordinate corrective action planning; support risk identification and mitigation strategies.
• Develop and support continuous monitoring strategy; review vulnerability scan outputs and assessment findings.
• Track remediation status and reporting requirements; support periodic security control assessments.
• Support preparation and maintenance of ATO documentation packages; assist with evidence collection and documentation updates.
• Coordinate with agency ISSOs, security officials, and 3PAO assessors; support audit readiness and compliance reviews.

Required Qualifications

• Minimum seven (7) years of federal cybersecurity compliance experience.
• Demonstrated experience supporting FedRAMP Moderate systems.
• Strong working knowledge of NIST SP 800-53 Moderate, NIST SP 800-37 (RMF), and FISMA compliance requirements.
• Experience managing POA&M documentation.
• Experience supporting ATO packages, renewals, and ongoing compliance activities; experience coordinating with federal security stakeholders.

Preferred Experience

• CISSP, CISM, or equivalent cybersecurity certification.
• Experience supporting CFO Act agencies.
• Experience in federal financial system environments.

What Success Looks Like

• NIST SP 800-53 Moderate controls are validated and documented cleanly, supporting on-time ATO renewals.
• POA&M items are tracked and remediated on schedule, with minimal overdue findings.
• Continuous monitoring and 3PAO coordination run smoothly, keeping the system audit-ready at all times.

Security & Eligibility Requirements

• S. Citizenship or Lawful Permanent Residency with a minimum of three (3) years of U.S. residency
• Successful completion of a Moderate Risk background investigation and FBI fingerprinting
• Eligibility to obtain and maintain an HSPD-12 Personal Identity Verification (PIV) credential
• Execution of a Non-Disclosure Agreement (NDA)
• Compliance with Bureau of the Fiscal Service Security Rules of Behavior
• Completion of required cybersecurity and privacy awareness training
• Work must be performed within the United States (remote access from foreign locations is not permitted)
• Employment is contingent upon contract award and Government approval of candidate qualifications

Benefits

• Referral Bonus
• (401k) Matching
• Holidays – Eleven
• Technology Reimbursement
• Short-Term & Long-Term Disability
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (0-3 years - 15 Days PTO | 3+ years 20 Days)
• 80% Employer Paid Health Care Plan (Medical, Dental & Vision)

Benefit eligibility and coverage are subject to applicable plan terms and company policies.

Salary: $120,000 - $140,000 – confirm DC pay transparency requirement] (commensurate with experience)

Equal Opportunity Employer Minority/Female/Veteran/Disability

All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or status within any other protected group.

Only direct applicants will be considered. Submissions from recruiting or staffing firms will not be accepted.