Cloud Compliance Specialist - RMF / ATO / Cybersecurity

This professional will lead compliance documentation activities, coordinate continuous monitoring, conduct risk assessments, and support the maintenance of secure, audit-ready cloud environments., * Develop, review, update, and maintain cybersecurity compliance documentation supporting cloud-based systems.

• Prepare and maintain System Security Plans (SSPs), compliance artifacts, and supporting ATO documentation.
• Coordinate continuous monitoring activities across approved cloud environments.
• Review automated vulnerability scans, security findings, and configuration drift reports.
• Identify noncompliant cloud resources and coordinate remediation activities.
• Track corrective actions and verify the implementation of required security measures.
• Develop and maintain Plans of Action and Milestones (POA&Ms).
• Conduct formal cloud architecture risk assessments.
• Interpret and apply applicable cybersecurity control requirements.
• Support RMF change control activities and compliance reporting.
• Evaluate the security implications of system changes, new cloud services, and updated operational practices.
• Coordinate with system owners, cloud engineers, cybersecurity specialists, and government personnel.
• Maintain documentation and evidence supporting audits and ongoing cloud accreditation.

• Approximately 4+ years of cybersecurity compliance, information assurance, RMF, or ISSO-related experience.
• Direct experience preparing or maintaining ATO documentation.
• Working knowledge of RMF processes and NIST security controls.
• Experience with System Security Plans, POA&Ms, vulnerability management, and continuous monitoring.
• Ability to analyze security scan results and coordinate remediation.
• Familiarity with AWS, Azure, or comparable cloud security environments.
• Strong written documentation, auditing, and technical communication skills., * Experience with eMASS, DISA STIGs, ACAS, Nessus, or comparable tools.
• Experience supporting cloud systems within Army or other federal environments.
• Security+, CySA+, CISSP, CISM, or equivalent professional certification.
• Familiarity with NIST SP 800-53, NIST SP 800-37, and federal cloud authorization activities.
• Previous experience as an ISSO, RMF Analyst, ATO Specialist, or Information Assurance Engineer.

Security: T-3 required under the PWS.