AI Vendor Security & Compliance Lead

Peraton; Northern (KY); Hybrid; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Regulatory and Compliance Lead on the CMS Fraud Prevention Services (FPS) Team. You will act as the compliance authority for the agentic AI vendor evaluation and author the regulatory inputs to the vendor-list assessment and POC proposal security narrative.

You will ensure all security activities, data paths, and artifacts stay within the FPS ATO boundary and comply with CMS/FISMA, CSRAP, and HIPAA PHI requirements, coordinating with CMS stakeholders and FPS ISSO/ISSM.

Qualifications

• CMS security frameworks and ATO lifecycle (SSP/SAR/POA&M)
• Experience with FISMA and NIST tailoring
• Experience assessing third-party/vendor security posture
• Knowledge of cloud-native security (AWS, IAM, KMS)
• Proven ability to author security artifacts and briefings for CMS review

Responsibilities

• Assess vendor security posture against CMS requirements
• Author security inputs to POC solution proposal
• Coordinate with FPS ISSO/ISSM and CMS stakeholders
• Own compliance artifacts (SSP inputs, POA&M, PIA/SORN)
• Serve as point of contact for third-party vendors
• Advise on LLM/agentic-AI compliance concerns

Skills

CMS security frameworks

Regulatory/compliance leadership

Security documentation

Vendor risk assessment

Technical writing

Education

BS/BA in a relevant field

MS/MA in a relevant field

PhD

Tools

AWS FedRAMP baselines

Okta SSO/RBAC

Splunk/CloudWatch

NIST SP 800-53

HIPAA/PHI handling

Job description

Peraton is seeking a Regulatory and Compliance Lead on the CMS Fraud Prevention Services (FPS) Team. You will act as the compliance authority for the agentic AI vendor evaluation and author the regulatory inputs to the vendor-list assessment and POC proposal security narrative.

You will ensure all security activities, data paths, and artifacts stay within the FPS ATO boundary and comply with CMS/FISMA, CSRAP, and HIPAA PHI requirements, coordinating with CMS stakeholders and FPS ISSO/ISSM.