Cybersecurity Compliance / RMF Lead (ATO Lead)
Tri -Force Consulting Services
28 days ago
Contract
On-site
Rockville, Maryland, United States
Cybersecurity Compliance \/ RMF Lead (ATO Lead)<\/b>
<\/div>
<\/div>
Client:<\/b> National Institutes of Health (NIH)
<\/div>
<\/div>
Location: <\/b>9800 Medical Center Drive, Building B, Rockville, MD 20850, USA
<\/div>
<\/div>
<\/div>
<\/div>
Position Overview<\/b>
<\/b> <\/div>
<\/div>
<\/b> <\/div>
<\/div>
- The Cybersecurity Compliance \/ RMF Lead (ATO Lead) is responsible for leading Risk Management Framework (RMF) lifecycle activities and managing the Authority to Operate (ATO) process for federal information systems. <\/span>
<\/li>- This role ensures systems meet federal cybersecurity compliance standards and NIH\/HHS security requirements.
<\/span><\/li> <\/ul>
<\/div>The ideal candidate brings deep expertise in federal cybersecurity frameworks, hands\-on ATO experience, and strong stakeholder coordination skills within a regulated government environment.<\/b>
<\/b> <\/div>
<\/div>Key Responsibilities<\/b>
<\/div>
<\/div>- RMF Lifecycle Management
<\/span><\/li>- Lead end\-to\-end RMF activities in accordance with National Institute of Standards and Technology guidance.
<\/span><\/li>- Develop, maintain, and manage required security documentation including:
<\/span><\/li>- System Security Plan (SSP)
<\/span><\/li>- Security Assessment Plan (SAP)
<\/span><\/li>- Security Assessment Report (SAR)
<\/span><\/li>- Plan of Action and Milestones (POA&M)
<\/span><\/li>- Conduct security categorization and control selection based on National Institute of Standards and Technology Special Publication 800\-53 requirements.
<\/span><\/li>- ATO & Compliance Support
<\/span><\/li>- Lead and support Authority to Operate (ATO) and re\-authorization efforts.
<\/span><\/li>- Ensure compliance with:
<\/span><\/li>- NIST SP 800\-53
<\/span><\/li>- FISMA
<\/span><\/li> <\/ul>FedRAMP requirements (as applicable)<\/b>
<\/div>
<\/div>- Coordinate security control assessments and remediation activities.
<\/span><\/li>- Track vulnerabilities and manage POA&M items through closure.
<\/span><\/li>- Risk & Stakeholder Management
<\/span><\/li>- Conduct and document security risk assessments.
<\/span><\/li>- Collaborate with Information System Security Officers (ISSOs), system owners, and security assessors.
<\/span><\/li>- Provide compliance status updates to leadership and federal stakeholders.
<\/span><\/li>- Support internal and external audits.
<\/span><\/li> <\/ul>
<\/div>Required Qualifications<\/b>
<\/div>
<\/div>- 7+ years of experience in cybersecurity compliance within federal environments.
<\/span><\/li>- Strong hands\-on experience implementing and managing RMF.
<\/span><\/li>- Demonstrated experience leading federal ATO processes.
<\/span><\/li>- Deep knowledge of NIST SP 800\-53 security controls and assessment procedures.
<\/span><\/li>- Experience developing SSPs, SARs, SAPs, and POA&Ms.
<\/span><\/li>- Strong written and verbal communication skills.<\/span>
<\/li> <\/ul>
<\/div>â<\/span>
<\/div>If you are: bright, motivated, skilled, a difference\-maker, able to get things done, work with minimum direction,<\/b>
<\/b> <\/div>enthusiastic, a thinker, able to juggle and multi\-task, communicate effectively, and lead, then we would like to<\/b>
<\/b> <\/div>hear from you. We need exceptionally capable people for this role for our client, so get back to us and tell us why<\/b>
<\/b> <\/div> - Strong hands\-on experience implementing and managing RMF.
- Track vulnerabilities and manage POA&M items through closure.
- Lead end\-to\-end RMF activities in accordance with National Institute of Standards and Technology guidance.
- This role ensures systems meet federal cybersecurity compliance standards and NIH\/HHS security requirements.