Federal RMF & NIST Compliance Analyst

Noblis, Inc.; Washington (District of Columbia); On-site; USD 116,000 - 181,000; Full time

Job summary

Noblis is seeking a detail-oriented cybersecurity compliance professional to support RMF-based security authorization and continuous monitoring for a federal information system environment. The role focuses on managing the Authorization to Operate lifecycle, developing SSPs, SARs, POA&Ms, risk assessments, and guiding remediation with technical teams to close gaps.

Ideal candidates will have experience with NIST SP 800-53, ATO processes, continuous monitoring, and strong documentation and

Qualifications

• Experience supporting cybersecurity compliance and RMF.
• Expertise with NIST SP 800-53 security controls and federal requirements.
• Experience developing and reviewing authorization package documentation (SSPs, SARs, POA&Ms, Risk Assessments).
• Understanding of ATO processes and continuous monitoring.

Responsibilities

• Manage the security authorization lifecycle for federal information systems.
• Coordinate activities to obtain and maintain ATO approvals.
• Assess and track NIST SP 800-53 controls and compliance.
• Develop and maintain SSPs, SARs, POA&Ms, and risk assessments.
• Guide remediation and POA&M closure with technical teams.
• Review vulnerability findings and support compliance remediation.
• Support continuous monitoring and security posture tracking.
• Prepare evidence for audits and compliance reviews.

Skills

NIST RMF

NIST SP 800-53

POA&M management

Documentation writing

Stakeholder communication

MS Office

Education

Bachelor’s degree in Cybersecurity

Masters degree

Associates degree

Tools

Excel

Word

PowerPoint

Job description

Noblis is seeking a detail-oriented cybersecurity compliance professional to support RMF-based security authorization and continuous monitoring for a federal information system environment. The role focuses on managing the Authorization to Operate lifecycle, developing SSPs, SARs, POA&Ms, risk assessments, and guiding remediation with technical teams to close gaps.

Ideal candidates will have experience with NIST SP 800-53, ATO processes, continuous monitoring, and strong documentation and