Information Assurance and Security, Advisor

Responsibilities Peraton is seeking an Information Assurance Security Engineer to join our team of qualified, and diverse individuals The Governance, Risk and Compliance (GRC) Team is responsible for ensuring compliance to company policies and procedures, client requirements and local, state, and federal law. The GRC Engineer must also assist in the discovery of acceptable vendors for the client and internal Peraton business owners and identify and manage the risks imposed by internal and external entities, products, and services and the identification, analysis, treatment and ongoing monitoring of risks imposed by these entities using industry accepted frameworks. The ideal candidate has a strong working knowledge of Information Technology and background in information security risk management, information security standards and compliance requirements, and security GRC frameworks. They are a motivated self-starter that is capable of ensuring successful security involvement in IT projects from kick-off to closing in alignment with Secure by Design principles. Work location: This position can be worked remotely Day to Day Work Responsibilities: Provide expertise to the client and internal Peraton teams in the best security practices during the vendor on-boarding process. Determine product/services that meet the needs of the client and NIST 800-53 standards. Identify, analyze, treat, and monitor risk imposed by third-party and internal systems being on-boarded. Improve the security posture of the company and the client by documenting and managing existing risks as needed. Update and maintain GRC policies and procedures in a timely manner. Ensure compliance to local, state, and federal requirements applicable by policy/contractual or legality. Qualifications Basic Qualifications: Bachelor's degree and 8 years or a HS diploma/equivalent and 12 years experience U.S. Citizenship required 7 years of experience working in information security architecture, information security governance, risk and compliance, information security threat and vulnerability management, and/or identity governance and administration; OR Equivalent work experience and cybersecurity certifications such as CISSP, CISM, etc. Drive, aptitude, and attitude to handle complex or unique situations with strong analytical, critical thinking, and problem-solving skills. Strong interpersonal skills and effective written and verbal communication skills. Proven knowledge of multiple regulatory requirements and compliance frameworks (NIST, HIPAA, FTI, CJIS). Excellent understanding of information security principles, risk assessment methodologies, and security controls. Preferred Qualifications: Experience with GRC tools and platforms is a plus. Target Salary Range $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEO EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law. #J-18808-Ljbffr