Federal RMF & NIST Security Compliance Analyst

Noblis, Inc.; United States; Hybrid; USD 115,000 - 218,000; Full time

Job summary

Noblis is seeking a detail-oriented cybersecurity compliance professional to support system authorization and continuous monitoring in a Federal environment. You will manage the security authorization lifecycle, ensure RMF and NIST 800-53 compliance, and maintain documentation for Authorization to Operate (ATO) decisions.

The role requires collaboration with technical teams to assess controls, identify gaps, and guide remediation through POA&M closure while delivering thorough technical guidance

Qualifications

• Experience supporting cybersecurity compliance, security authorization, risk management, or information security programs.
• Experience with RMF and NIST SP 800-53 controls.
• Experience developing, maintaining, or reviewing SSPs, SARs, POA&M, and risk assessments.
• Understanding of ATO process and continuous monitoring requirements.
• Capability to translate technical findings into compliance documentation and actionable recommendations.
• Strong written and verbal communication skills; ability to work with multiple stakeholders.

Responsibilities

• Manage the security authorization lifecycle for information systems in accordance with RMF.
• Coordinate activities to obtain and maintain ATO approvals.
• Assess and track NIST SP 800-53 controls and compliance requirements.
• Develop, review, update, and maintain authorization package documentation (SSPs, SARs, POA&Ms, risk assessments, monitoring docs).
• Manage POA&M activities, track findings, and support closure.
• Provide guidance to system owners, engineers, and security stakeholders for remediation and closure.
• Collect evidence supporting control implementation and compliance requirements.
• Review vulnerability scans, findings, and docs to identify gaps and remediation needs.
• Support continuous monitoring by tracking posture, status, and control effectiveness.
• Participate in security assessments, audits, and compliance reviews.
• Develop risk mitigation strategies and remediation recommendations.
• Track milestones, deadlines, and remediation activities; communicate status to stakeholders.

Skills

NIST RMF

NIST SP 800-53

POA&M management

SSP/SAR/Risk Assessments

ATO process

Vulnerability management

GRC platforms

Security documentation

Continuous Monitoring

Education

Bachelor’s degree in Cybersecurity/IT/Telecommunications

9+ years cybersecurity experience

Tools

Microsoft Office (Excel/Word/PowerPoint)

Job description

Noblis is seeking a detail-oriented cybersecurity compliance professional to support system authorization and continuous monitoring in a Federal environment. You will manage the security authorization lifecycle, ensure RMF and NIST 800-53 compliance, and maintain documentation for Authorization to Operate (ATO) decisions.

The role requires collaboration with technical teams to assess controls, identify gaps, and guide remediation through POA&M closure while delivering thorough technical guidance