Information Assurance and Security, Advisor

Peraton; Reston (VA); Sur place; USD 104 000 - 166 000; Plein temps

Résumé du poste

Peraton is seeking an Information Assurance and Security Advisor to lead compliance for CMS FPS vendor evaluations and POC security inputs. You will ensure all security activities stay inside the FPS ATO boundary and align with CMS/FOA requirements.

You will coordinate with FPS security stakeholders, own SSP/POA&M/PIA artifacts, and advise on AI-specific compliance concerns, including data retention and logging. This role requires US citizenship and ability to obtain Public Trust clearance.

Qualifications

• Experience leading compliance work on Federal systems (CMS preferred).
• Deep knowledge of CMS security frameworks: CFACTS, CSRAP, and the ATO lifecycle.
• Practical experience with FISMA / NIST SP 800-53 control tailoring, inheritance from cloud providers (AWS FedRAMP baselines).
• Experience assessing third-party/vendor security posture: SOC 2, FedRAMP, HIPAA/HITRUST.
• US citizenship; ability to obtain and maintain a Public Trust clearance.

Responsabilités

• Assess CMS fraud prevention service candidates against CMS security posture, data-handling, and ATO requirements.
• Author security-and-compliance inputs to POC Solution proposal (control inheritance, boundary definition).
• Coordinate with FPS ISSO/ISSM and CMS security stakeholders to stay within FPS ATO boundary.
• Own compliance artifacts and cadence (SSP inputs, POA&M entries, PIA/SORN as applicable).
• Serve as the single point of contact for security-and-compliance questions from vendors/CMS/PM.
• Advise on LLM/agentic-AI compliance concerns (data retention, prompt/response logging, PHI-in-prompt controls).

Connaissances

CMS security frameworks

FISMA/NIST SP 800-53

Cloud security (AWS, Okta)

Security artifacts

Public Trust clearance

US citizenship

Formation

BS/BA

MS/MA

PhD

Outils

AWS FedRAMP baselines

SOC 2

FedRAMP

HIPAA/HITRUST

CloudWatch/Splunk

Okta SSO/RBAC

Description du poste

Information Assurance and Security, Advisor

Job Locations: US

Requisition ID: 2026-171662

Position Category: Cyber Security

Clearance: Public Trust

Responsibilities

We are seeking a Regulatory and Compliance Lead on the CMS Fraud Prevention Services (FPS) Team, as a compliance authority for the agentic AI vendor evaluation, producing the regulatory-and-compliance portion of the vendor-list assessment and authoring the security inputs to the Proof of Concept (POC) Solution proposal. The Lead ensures every security-related activity, POC data path, and vendor artifact remain within the FPS ATO boundary and comply with CFACTS, CSRAP, FISMA, and HIPAA PHI requirements.

Responsibilities:

• Assess each candidate agentic AI vendor against CMS security posture, data-handling, and ATO requirements as part of the vendor-list assessment.
• Author the security-and-compliance inputs to the POC Solution proposal: control inheritance, boundary definition, data-flow diagrams, and the compliance narrative for the vendor-isolated exclusive environment.
• Coordinate with the FPS ISSO/ISSM and CMS security stakeholders to keep AI tool assessment and POC activity inside the FPS ATO boundary.
• Own compliance artifacts and cadence (SSP inputs, POA&M entries, PIA/SORN as applicable) for the AI vendor-evaluation effort.
• Serve as the single point of contact for security-and-compliance questions raised by third-party vendors, CMS, or the Peraton PM.
• Advise the Lead AI Solutions Architect on LLM/agentic-AI-specific compliance concerns (model-provider data retention, prompt/response logging, PHI-in-prompt controls, tool authorization).

Qualifications

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD
• Experience leading compliance work on Federal (ideally, CMS) systems.
• Deep working knowledge of CMS (or other Federal agencies) security frameworks: CFACTS, CSRAP, and the ATO lifecycle (SSP, SAR, POA&M, contingency plan, PIA/SORN).
• Practical experience with FISMA / NIST SP 800-53 control tailoring, inheritance from cloud providers (AWS FedRAMP baselines), and boundary definition.
• Experience assessing third-party/vendor security posture: SOC 2, FedRAMP, HIPAA/HITRUST, penetration-test evidence, vulnerability management.
• Familiarity with cloud-native security in AWS (IAM, KMS, GuardDuty, CloudTrail, Config), Okta SSO/RBAC, and audit-log routing to CloudWatch/Splunk.
• Working knowledge of HIPAA PHI handling and Federal PII requirements, especially for Medicare/Medicaid claims data.
• Ability to author security artifacts and briefings for CMS-level review; clear technical writing required.
• US citizenship; ability to obtain and maintain a Public Trust clearance.

Preferred Qualifications:

• CISSP, CISM, CAP, CISA, or equivalent certification.
• Prior compliance work on the FPS ATO or another CMS ATO'd system (e.g., IDR, One PI, UCM).
• Familiarity with security considerations specific to LLM and agentic AI systems (model-provider data retention, prompt logging, MCP tool authorization, RBAC for LLM outputs).
• Experience defining vendor-isolated enclaves inside a Federal customer's authorization boundary.
• Familiarity with SAFe Agile compliance patterns (continuous ATO / RMF automation).
• Experience with Databricks and Snowflake governance controls (Unity Catalog, dynamic masking, row/column access policies).

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Target Salary Range

$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.