Federal RMF & ATO Compliance Analyst

Noblis; Atlantic City (NJ); On-site; USD 78,900 - 218,475; Full time

Job summary

Noblis is seeking a detail-oriented cybersecurity compliance professional to manage the security authorization lifecycle and continuous monitoring for federal systems in the New Jersey area. The role requires expertise with RMF, NIST SP 800-53 controls, and POA&M management, ensuring timely ATO decisions and ongoing compliance across information systems.

The successful candidate will develop and maintain SSPs, SARs, risk assessments, and PMO documentation, collaborate with technical teams, and

Qualifications

• Experience supporting cybersecurity compliance, security authorization, risk management, or information security programs.
• Experience with the NIST RMF.
• Subject matter expertise with NIST SP 800-53 security controls and Federal cybersecurity requirements.
• Experience developing, reviewing, and maintaining SSPs, SARs, POA&Ms, and risk assessments.
• Understanding of ATO process and continuous monitoring requirements.
• Ability to translate technical findings into compliance documentation.

Responsibilities

• Manage the security authorization lifecycle for one or more information systems in accordance with RMF.
• Coordinate activities to obtain and maintain Authorization to Operate (ATO) approvals.
• Assess and track implementation of NIST SP 800-53 controls and compliance requirements.
• Develop, review, update, and maintain authorization package documentation (SSPs, SARs, POA&Ms, risk assessments).
• Manage POA&M findings, remediation progress, and closure support.
• Provide technical guidance to system owners and engineers for remediation and closure.
• Gather evidence supporting control implementation and compliance requirements.
• Review vulnerability scans and assessment findings to identify gaps and remediation needs.
• Support continuous monitoring by tracking security posture and compliance status.

Skills

NIST RMF

NIST SP 800-53 controls

Security compliance

POA&M management

Control assessment

Documentation review

Strong communication

Security governance

Education

Bachelor’s degree in Cybersecurity, Information Technology, Telecommunications, or a related field

9+ years of experience in cybersecurity or network security roles

Tools

Microsoft Excel

Microsoft Word

PowerPoint

Job description

Noblis is seeking a detail-oriented cybersecurity compliance professional to manage the security authorization lifecycle and continuous monitoring for federal systems in the New Jersey area. The role requires expertise with RMF, NIST SP 800-53 controls, and POA&M management, ensuring timely ATO decisions and ongoing compliance across information systems.

The successful candidate will develop and maintain SSPs, SARs, risk assessments, and PMO documentation, collaborate with technical teams, and