IT Audit Advisory Consultant/FISCAM SME

Peraton; Herndon (VA); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

25 days PTO

Bonus plan

Job summary

Peraton is seeking an IT Audit Advisory Consultant/FISCAM SME to support government customers and project teams across Herndon, Riverdale, and Washington, D.C. You will design CAPs, perform validation, and advise on RMF and ITGC controls while coordinating with ISSO, vendors, and end users.

The role requires a strong analytical mindset, ability to work independently, and experience with NIST 800-53 guidance, FISCAM, and audit remediation.

Qualifications

• Clearance TS/SCI with polygraph or ability to obtain SCI and pass polygraph.
• Bachelor's or Master's with years of relevant experience as described.
• Active Security+ (DoD 8570 IAT II) certification.
• Ability to learn IT general controls (ITGC), FISCAM, and NIST 800-53v4.
• Ability to translate audit findings into actionable requirements.
• Experience with risk analysis and assessment determinations.

Responsibilities

• Design, develop, and implement IT corrective action plans (CAPs) for SIDs and IPA findings.
• Perform CAP validation testing for remediation activities.
• Perform baseline reviews (e.g., FISCAM) to assess readiness and remediate deficiencies.
• Monitor, track, and report IT CAP statuses and third-party risk (e.g., service providers).
• Develop risk-based prioritization for IT findings.
• Provide advisory RMF support for IT controls.
• Integrate leading practices for IT audit remediation.

Skills

TS/SCI with polygraph

Security+ (DoD 8570 IAT II)

ITGC

FISCAM

NIST 800-53v4

Risk analysis

RMF

translate findings to stakeholders

Education

Bachelor's degree

Master's degree

Tools

Xacta

Job description

Job Locations

US-VA-Herndon | US-MD-Riverdale | US-DC-Washington

Responsibilities

We are seeking a highly skilled and experienced IT Audit Advisory Consultant/FISCAM SME to join our team. This position will require the candidate to work closely with government customers, contractor Project Lead, Information Systems Security Officer (ISSO), Application Vendor, and Application End Users. The role demands an individual who is proactive, detail-oriented, and capable of working independently while adhering to customer requirements and timelines.

Duties and Responsibilities

• Design, develop, and implement IT corrective action plans (CAPs) for self-identified deficiencies (SIDs) and external IPA findings
• Perform CAP validation testing for completed remediation activities
• Perform baseline review assessments (e.g., FISCAM) to assess system readiness and remediate identified deficiencies
• Monitor, track, and report on IT CAP statuses and third-party risk management (e.g., service providers)
• Develop risk-based approaches for prioritization of IT findings
• Perform advisory services for risk management framework (RMF) activities to support system team IT control implementations in accordance with financial management overlay
• Integrate leading practices for IT audit remediation

Qualifications

Required Qualifications:

• Clearance: TS/SCI with polygraph (or ability to obtain SCI and pass polygraph).
• Education/Experience: Bachelor's + 8 years relevant experience OR a Master's Degree and 6 years of relevant experience. An additional 4 years of experience may be considered in lieu of degree.
• Certification: Active Security+ (DoD 8570 IAT Level II).
• Other Skills:
  • Ability to learn IT general controls (ITGC), Financial Information System Control Audit Manual (FISCAM), and National Institute of Standards and Technology Special Publication (NIST) 800-53v4
  • Ability to understand IT audit finding recommendations to translate those requirements to functional/technical stakeholders
  • Ability to understand business processes in order to develop and implement new controls to mitigate or remediate identified IT audit gaps
  • Experience with risk analysis and assessment determinations incorporating system/mission owner, and unique operational constraints

Desired Qualifications:

• Clear communicator with both technical and non-technical stakeholders.
• Ability to manage and prioritize tasks independently.
• Strong written/verbal communication.
• Experience with Xacta
• Familiar with Configuration Management
• Experience with effective policy, instruction, and development for Federal or DoD Information Security Programs
• Experience with performing Security Control Assessment in compliance with NIST SP 800- 37, NIST SP 800-53, NIST SP 800-53A, and other NIST 800 guide series

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can't be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we're keeping people around the world safe and secure.

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and participation in an attractive bonus plan.

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.