Senior GRC Security Lead: Cloud ATO (RMF/FedRAMP)

TechSur Solutions, LLC; Reston (VA); On-site; USD 139,000 - 155,000; Full time

Job summary

TechSur Solutions, LLC seeks a Senior Security Specialist to lead GRC and ATO activities for a federal cloud program in a multi-cloud environment (AWS, Azure, GCP, Oracle Cloud). You will ensure RMF and FedRAMP compliance across landing zones, pipelines, and shared services.

You will develop SSPs, coordinate with 3PAO, and manage POA&Ms in ServiceNow, producing monthly compliance reports. Strong Gov't writing and briefing skills are essential.

Qualifications

• Experience leading ATO efforts for cloud services.
• Knowledge of RMF (SP 800-37) and NIST 800-53 Rev 5 control families.
• Familiar with FedRAMP Moderate/High authorizations.
• Ability to document SSPs, SAP/SAR, and POA&Ms with a 3PAO or agency assessor.
• Experience with continuous security assessments and monitoring in cloud environments.
• Strong technical writing to brief senior government stakeholders.
• Ability to obtain and maintain the background investigation required.

Responsibilities

• Lead ATO preparation for cloud services under RMF/NIST SP 800-37 and FedRAMP.
• Develop and maintain SSPs, control statements, matrices, and CSP inheritance docs.
• Coordinate with a 3PAO; support SAP/SAR, evidence gathering, interviews, findings.
• Manage POA&Ms; track gaps, owners, remediation dates in ServiceNow.
• Run continuous monitoring with CSP tools and produce monthly reports.
• Prioritize vulnerabilities using CVSS and customer risk ratings.
• Review architectures and CI/CD for Zero Trust alignment and security standards.
• Assist incident response playbooks mapped to MITRE ATT&CK and tabletop exercises.
• Brief customer leadership and present security posture in reviews.

Skills

GRC governance

Cloud security

NIST RMF

FedRAMP knowledge

Security assessment

Technical writing

Stakeholder briefing

3PAO coordination

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

ServiceNow IRM/GRC

Xacta

eMASS

AWS Security Hub

Azure Security Center

GCP Security Command Center

OCI Cloud Guard

Prisma Cloud

Job description

TechSur Solutions, LLC seeks a Senior Security Specialist to lead GRC and ATO activities for a federal cloud program in a multi-cloud environment (AWS, Azure, GCP, Oracle Cloud). You will ensure RMF and FedRAMP compliance across landing zones, pipelines, and shared services.

You will develop SSPs, coordinate with 3PAO, and manage POA&Ms in ServiceNow, producing monthly compliance reports. Strong Gov't writing and briefing skills are essential.