IT Audit Advisory Consultant/FISCAM SME

Peraton; Riverdale Park (MD); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

Generous PTO

Annual bonus plan

Subsidized benefits coverage

Job summary

Peraton seeks an IT Audit Advisory Consultant/FISCAM SME to support government customers. This role requires independent work with Project Leads, ISSOs, vendors, and end users under tight timelines.

Responsibilities include designing CAPs, validating remediation, and performing FISCAM assessments to strengthen control environments, RMF support, and risk-based prioritization. Eligible for a substantial benefits package and competitive salary range.

Qualifications

• TS/SCI with polygraph clearance (or ability to obtain).
• Bachelor's degree + 8 years relevant experience OR Master's + 6 years; 4 years may substitute.
• Active Security+ (DoD 8570 IAT Level II).
• Knowledge of ITGC, FISCAM, and NIST 800-53v4.
• Ability to translate audit findings to stakeholders and adapt controls.

Responsibilities

• Design, develop, and implement IT CAPs for SIDs and IPA findings.
• Perform CAP validation testing for remediation activities.
• Perform baseline reviews (FISCAM) to assess readiness and remediation.
• Monitor, track, and report IT CAP statuses and third-party risk.
• Develop risk-based approaches for prioritizing IT findings.
• Advise RMF activities to support IT control implementations.
• Integrate leading practices for IT audit remediation.

Skills

Clear communicator

Task prioritization

Strong communication

ITGC knowledge

NIST/FISCAM familiarity

Education

Bachelor's degree

Master's degree

Tools

Xacta

Configuration Management

Job description

IT Audit Advisory Consultant/FISCAM SME

Job Locations: US-VA-Herndon | US-MD-Riverdale | US-DC-Washington

Requisition ID: 2026-165501 | Position Category: Cyber Security | Clearance: Top Secret/SCI w/Poly

Responsibilities

We are seeking a highly skilled and experienced IT Audit Advisory Consultant/FISCAM SME to join our team. This position will require the candidate to work closely with government customers, contractor Project Lead, Information Systems Security Officer (ISSO), Application Vendor, and Application End Users. The role demands an individual who is proactive, detail-oriented, and capable of working independently while adhering to customer requirements and timelines.

• Design, develop, and implement IT corrective action plans (CAPs) for self-identified deficiencies (SIDs) and external IPA findings
• Perform CAP validation testing for completed remediation activities
• Perform baseline review assessments (e.g., FISCAM) to assess system readiness and remediate identified deficiencies
• Monitor, track, and report on IT CAP statuses and third-party risk management (e.g., service providers)
• Develop risk-based approaches for prioritization of IT findings
• Perform advisory services for risk management framework (RMF) activities to support system team IT control implementations in accordance with financial management overlay
• Integrate leading practices for IT audit remediation

Required Qualifications

• Clearance: TS/SCI with polygraph (or ability to obtain SCI and pass polygraph).
• Education/Experience: Bachelor's + 8 years relevant experience OR a Master's Degree and 6 years of relevant experience. An additional 4 years of experience may be considered in lieu of degree.
• Certification: Active Security+ (DoD 8570 IAT Level II).
• Other Skills:
  • Ability to learn IT general controls (ITGC), Financial Information System Control Audit Manual (FISCAM), and National Institute of Standards and Technology Special Publication (NIST) 800-53v4
  • Ability to understand IT audit finding recommendations to translate those requirements to functional/technical stakeholders
  • Ability to understand business processes in order to develop and implement new controls to mitigate or remediate identified IT audit gaps
  • Experience with risk analysis and assessment determinations incorporating system/mission owner, and unique operational constraints

Desired Qualifications

• Clear communicator with both technical and non-technical stakeholders.
• Ability to manage and prioritize tasks independently.
• Strong written/verbal communication.
• Experience with Xacta
• Familiar with Configuration Management
• Experience with effective policy, instruction, and development for Federal or DoD Information Security Programs
• Experience with performing Security Control Assessment in compliance with NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and other NIST 800 guide series

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and participation in an attractive bonus plan.

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.