Security | ATO Compliance Lead

At i360technologies, we specialize in business consulting and technology services for federal agencies. We are seeking a Security / ATO Compliance Lead to oversee cybersecurity compliance alignment, continuous monitoring, and Authority-to-Operate (ATO) lifecycle support for a large-scale federal financial modernization initiative.

About the Role

This role ensures alignment with FedRAMP Moderate, FISMA, and NIST SP 800-53 Moderate security controls and supports Risk Management Framework (RMF) implementation activities, operating in a Moderate-impact federal cloud environment supporting multi-agency financial systems modernization.

Responsibilities

• Lead review and validation of NIST SP 800-53 Moderate control implementation; ensure alignment with Risk Management Framework (NIST SP 800-37).
• Maintain and update System Security Plan (SSP) documentation.
• Support FedRAMP Moderate compliance requirements; ensure alignment with client security policies; support FISMA compliance activities.
• Maintain and manage Plan of Action & Milestones (POA&M); track vulnerability remediation activities.
• Coordinate corrective action planning; support risk identification and mitigation strategies.
• Develop and support continuous monitoring strategy; review vulnerability scan outputs and assessment findings.
• Track remediation status and reporting requirements; support periodic security control assessments.
• Support preparation and maintenance of ATO documentation packages; assist with evidence collection and documentation updates.
• Coordinate with agency ISSOs, security officials, and 3PAO assessors; support audit readiness and compliance reviews.

Requirements

• Minimum seven (7) years of federal cybersecurity compliance experience.
• Demonstrated experience supporting FedRAMP Moderate systems.
• Strong working knowledge of NIST SP 800-53 Moderate, NIST SP 800-37 (RMF), and FISMA compliance requirements.
• Experience managing POA&M documentation.
• Experience supporting ATO packages, renewals, and ongoing compliance activities; experience coordinating with federal security stakeholders.

Qualifications

• CISSP, CISM, or equivalent cybersecurity certification (preferred).
• Experience supporting CFO Act agencies (preferred).
• Experience in federal financial system environments (preferred).

Security & Eligibility Requirements

• U.S. Citizenship or Lawful Permanent Residency with a minimum of three (3) years of U.S. residency.
• Successful completion of a Moderate Risk background investigation and FBI fingerprinting.
• Eligibility to obtain and maintain an HSPD-12 Personal Identity Verification (PIV) credential.
• Execution of a Non-Disclosure Agreement (NDA).
• Compliance with Bureau of the Fiscal Service Security Rules of Behavior.
• Completion of required cybersecurity and privacy awareness training.
• Work must be performed within the United States (remote access from foreign locations is not permitted).
• Employment is contingent upon contract award and Government approval of candidate qualifications.

What Success Looks Like

• NIST SP 800-53 Moderate controls are validated and documented cleanly, supporting on-time ATO renewals.
• POA&M items are tracked and remediated on schedule, with minimal overdue findings.
• Continuous monitoring and 3PAO coordination run smoothly, keeping the system audit-ready at all times.

Benefits

• Referral Bonus
• 401(k) Matching
• Eleven paid holidays
• Technology Reimbursement
• Short-Term & Long-Term Disability
• Life Insurance (Basic, Voluntary & AD&D)
• Paid Time Off (0-3 years - 15 Days PTO | 3+ years 20 Days)
• 80% Employer Paid Health Care Plan (Medical, Dental & Vision)

Benefit eligibility and coverage are subject to applicable plan terms and company policies.

Pay

The salary range for this position is $120,000 – $145,000 annually, commensurate with experience, certifications, and qualifications. Final offers may vary based on factors including relevant experience, education, certifications (e.g., CISSP, CISM), and contract award terms.