FISMA is a law. It requires government agencies to implement an information security program that manages risk and protects data from unauthorized access.
NIST is a non-regulatory agency that is responsible for providing specific guidelines that federal agencies can use to create their FISMA compliance program.