Information Privacy and Security, Senior Associate

VulnU; Austin (TX); Hybrid; USD 86,000 - 138,000; Full time

Benefits offered by this job

25 days PTO

Job summary

Peraton is seeking an Information Privacy and Security Analyst to join its Citizens Security & Public Services State and Local team. The role supports the Texas Integrated Eligibility Redesign System by assisting in implementing and maintaining information security measures to protect computer systems, networks, and data.

Under general direction, you will coordinate audits, monitor alerts, and help ensure security controls per established policies and frameworks.

Qualifications

• Bachelor's degree and 2 years of experience, OR 6 years with HS diploma/equivalent.
• Familiarity with IT security policies, standards, and procedures.
• Understanding of risk assessment and data protection concepts.
• Ability to document findings and prepare reports.

Responsibilities

• Coordinate security audits and responses with stakeholders.
• Monitor security alerts and correlate notifications to customer architecture.
• Assist in implementing security measures per policies and standards.
• Support disaster recovery planning and business continuity documentation.
• Interact with users to gather security access needs.

Skills

IT security policies

risk assessment

security awareness

communication skills

documentation

Education

Bachelor's degree + 2 years experience

HS diploma + 6 years experience

Tools

Archer GRC

GRC platforms

Job description

# Information Privacy and Security, Senior AssociatePeraton · peraton.comCategory: GRC & ComplianceLocation: RemoteLevel: SeniorSalary: $86,000 – $138,000## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* 25 days PTOResponsibilitiesPeraton is searching for an Information Privacy and Security Analyst to join its Citizens Security & Public Services State and Local team. The role supports the Texas Integrated Eligibility Redesign System (customer) Security Team by assisting in the implementation and maintenance of information security measures to protect computer systems, networks, and data. The position works under general direction and applies established security guidelines, policies, and frameworks to support a secure operating environment.Day-to-Day Roles and Responsibilities:ARC-AMPE Security Audit Coordination:Coordinate customer responses to ARC-AMPE and other security audits, serving as the primary point of contact between the customer Security Team and customer support teams.Develop deep familiarity with the ARC-AMPE security controls (a curated subset of NIST 800-53 controls) and their applicability to the customer environment.Develop working knowledge of the customer support teams responsible for responding to each control area and maintain awareness of roles and responsibilities across teams.Manage and monitor audit responses in the Archer GRC system, ensuring responders submit within required timeframes.Meet regularly with control responders to provide consulting assistance on control interpretation, evidence determination, and submission requirements.CISA and OEM Security Alert Monitoring:Subscribe to and monitor CISA and other OEM security alerts for applicability to the customer infrastructure.Correlate incoming CISA notifications against the customer architecture; when applicable, communicate findings to the customer within 48 hours of notice.Consult with customer on cyber threat remediations as requested.Assist in implementing security measures to protect computer systems, networks, and data in accordance with established policies and standards.Support efforts to prevent data loss and service interruptions by researching and evaluating new technologies to protect the environment.Help ensure all networks have adequate security controls to prevent unauthorized access.Maintain security system documentation and assist in keeping security systems current with software or hardware changes.Support application security assessments using off-the-shelf tools under general guidance.Assist in preparing vulnerability assessment documentation and contributing to security assessment reports.Participate in project-related conference calls and security review meetings, providing supporting information as needed.Conduct research to identify and understand new threats, vulnerabilities, and exploits, and report findings to the appropriate internal or customer stakeholders.Follow established procedures to help ensure the safety of information systems assets and protect systems from intentional or inadvertent access or destruction.Support the application of security frameworks including NIST 800-37, NIST 800-53, ARC/AMPE controls, POA&Ms, and Corrective Action Plans under general direction.Assist the project team with Disaster Recovery (DR) planning, Business Continuity Plan (BCP), and Continuity of Operations (COOP) documentation and assessments.Help prepare impact assessment reports documenting security incidents and contributing to remediation documentation.Assist in creating and maintaining standard operating procedure documents in adherence to security policies and standards.Document violations of computer security procedures and escalate findings to the appropriate internal or customer stakeholders.Interact with users to gather information on computer data access needs and assist in addressing routine security questions.QualificationsBasic Qualifications:Bachelor's degree and 2 years of experience, OR 6 years with a HS Diploma/equivalentFamiliarity with IT security policies, standards, and procedures.Basic knowledge of business continuity and disaster recovery concepts.Exposure to risk assessment processes or data processing security practices.Understanding of common security tools and measures (firewalls, data encryption, access controls).Ability to document security findings and assist in preparing reports and recommendations.Strong written and verbal communication skills; ability to explain security concepts in straightforward terms.Ability to manage and track multiple stakeholder deliverables and deadlines in a structured, organized manner.Comfortable working directly and independently with customer stakeholders.Must be a US Citizen or a Green Card Holder.Preferred Qualifications:Completion of information security training such as CompTIA Security+ or equivalent entry/mid-level certification.Familiarity with NIST frameworks, ARC/AMPE controls, or federal/state security compliance requirements.Experience working in a government IT or state agency environment.Experience with Archer GRC or similar GRC platform.Familiarity with CISA alert monitoring, threat intelligence feeds, or OEM security notifications.Experience coordinating security audit responses or supporting compliance activities in a government IT environment.Familiarity with GRC platforms; experience with Archer GRC preferred.Peraton OverviewPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.Target Salary Range$86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEOEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.