FISCAM SME & IT Audit Advisory Consultant

Peraton; Washington (District of Columbia); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

25 days PTO

Bonus plan

Subsidized benefits

Job summary

Peraton is seeking an IT Audit Advisory Consultant and FISCAM SME to work with government customers across US-VA, US-MD, and US-DC locations. You will design CAPs, validate remediation, and lead RMF-related IT control implementations while collaborating with ISSOs, vendors, and end users.

The role requires a TS/SCI with poly clearance (or ability to obtain). A Bachelor's or Master’s degree with substantial relevant experience, plus active Security+ certification, are required.

Qualifications

• Active TS/SCI with poly clearance or ability to obtain SCI with poly.
• Bachelor's + 8 years relevant experience or Master's + 6 years.
• Active Security+ (DoD 8570 IAT II) certification.
• Ability to learn ITGC, FISCAM, and NIST 800-53v4.
• Translate audit findings to technical and business stakeholders.

Responsibilities

• Design, develop, and implement IT corrective action plans (CAPs).
• Perform CAP validation testing for remediation activities.
• Conduct baseline reviews (FISCAM) to assess readiness.
• Monitor IT CAP statuses and third-party risk management.
• Develop risk-based prioritization of IT findings.
• Advise RMF activities and IT control implementations.
• Integrate leading practices for IT audit remediation.

Skills

IT audit

FISCAM

NIST 800-53

Risk assessment

Stakeholder management

Security+ (DoD 8570 IAT II)

Education

Bachelor's degree + 8 years experience

Master's degree + 6 years experience (4-year substitution)

Tools

Xacta

Configuration Management

Job description

Peraton is seeking an IT Audit Advisory Consultant and FISCAM SME to work with government customers across US-VA, US-MD, and US-DC locations. You will design CAPs, validate remediation, and lead RMF-related IT control implementations while collaborating with ISSOs, vendors, and end users.

The role requires a TS/SCI with poly clearance (or ability to obtain). A Bachelor's or Master’s degree with substantial relevant experience, plus active Security+ certification, are required.