Cloud Compliance Specialist

Cybersecurity Jobs; Fort Belvoir (VA); On-site; USD 90,000 - 150,000; Full time

Job summary

Unified Business Technologies Inc is seeking a Cloud Compliance Specialist to support Army cloud systems. The role focuses on RMF activities, ATO readiness, audit-ready documentation, and continuous monitoring coordination.

You will prepare SSPs, coordinate remediation, and maintain evidence for audits while interfacing with system owners, cloud engineers, and government personnel to ensure secure cloud environments.

Qualifications

• 4+ years in cybersecurity compliance, RMF or ISSO.
• Experience preparing ATO documentation.
• Knowledge of RMF processes and NIST controls.
• Experience with SSPs, POA&Ms, vulnerability management, and continuous monitoring.
• Ability to analyze security scan results and coordinate remediation.
• Familiarity with AWS, Azure, or comparable cloud environments.
• Strong written documentation and auditing skills.

Responsibilities

• Develop and maintain cybersecurity compliance documentation for cloud systems.
• Prepare SSPs, artifacts, and ATO documentation.
• Coordinate continuous monitoring across approved cloud environments.
• Review vulnerability scans and findings to support compliance.
• Identify noncompliant resources and coordinate remediation.
• Track corrective actions and verify security measures.
• Develop and maintain POA&Ms.
• Conduct cloud architecture risk assessments.
• Interpret and apply security controls.
• Support RMF change control and compliance reporting.
• Evaluate security implications of system changes and new services.
• Coordinate with system owners, cloud engineers, and government personnel.
• Maintain documentation and evidence for audits and accreditation.

Skills

Auditing & documentation

Technical communication

Risk assessment

Cloud security

Stakeholder coordination

Tools

eMASS

ACAS

Nessus

DISA STIGs

Job description

The Cloud Compliance Specialist at Unified Business Technologies Inc supports cybersecurity compliance obligations for Army cloud systems, including RMF activities and ATO readiness. The role focuses on audit-ready documentation, continuous monitoring coordination, risk assessment, and maintaining secure cloud environments.

Key Responsibilities

• Develop, review, update, and maintain cybersecurity compliance documentation for cloud-based systems.
• Prepare and maintain System Security Plans (SSPs), compliance artifacts, and supporting ATO documentation.
• Coordinate continuous monitoring activities across approved cloud environments.
• Review automated vulnerability scans, security findings, and configuration drift reports to support ongoing compliance.
• Identify noncompliant cloud resources and coordinate remediation activities with relevant stakeholders.
• Track corrective actions and verify that required security measures are implemented.
• Develop and maintain Plans of Action and Milestones (POA&Ms).
• Conduct formal cloud architecture risk assessments.
• Interpret and apply applicable cybersecurity control requirements.
• Support RMF change control activities and compliance reporting.
• Evaluate the security implications of system changes, new cloud services, and updated operational practices.
• Coordinate with system owners, cloud engineers, cybersecurity specialists, and government personnel.
• Maintain documentation and evidence supporting audits and ongoing cloud accreditation.

Required Qualifications

• Approximately 4+ years of cybersecurity compliance, information assurance, RMF, or ISSO-related experience.
• Direct experience preparing or maintaining ATO documentation.
• Working knowledge of RMF processes and NIST security controls.
• Experience with System Security Plans (SSPs), POA&Ms, vulnerability management, and continuous monitoring.
• Ability to analyze security scan results and coordinate remediation activities.
• Familiarity with AWS, Azure, or comparable cloud security environments.
• Strong written documentation, auditing, and technical communication skills.

Preferred Qualifications

• Experience with eMASS, DISA STIGs, ACAS, Nessus, or comparable tools.
• Experience supporting cloud systems within Army or other federal environments.
• Security+, CySA+, CISSP, CISM, or equivalent professional certification.
• Familiarity with NIST SP 800-53, NIST SP 800-37, and federal cloud authorization activities.
• Previous experience as an ISSO, RMF Analyst, ATO Specialist, or Information Assurance Engineer.

Technologies and Frameworks

• RMF
• NIST security controls
• System Security Plans (SSPs)
• Plans of Action and Milestones (POA&Ms)
• Vulnerability management
• Continuous monitoring
• AWS, Azure
• eMASS
• DISA STIGs
• ACAS, Nessus
• NIST SP 800-53, NIST SP 800-37
• Security+, CySA+, CISSP, CISM

Security Clearance

T-3 required under the PWS.