IT Audit Advisory Consultant/FISCAM SME

Peraton; Washington (District of Columbia); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

25 days PTO

Bonus plan

Subsidized benefits

Job summary

Peraton is seeking an IT Audit Advisory Consultant and FISCAM SME to work with government customers across US-VA, US-MD, and US-DC locations. You will design CAPs, validate remediation, and lead RMF-related IT control implementations while collaborating with ISSOs, vendors, and end users.

The role requires a TS/SCI with poly clearance (or ability to obtain). A Bachelor's or Master’s degree with substantial relevant experience, plus active Security+ certification, are required.

Qualifications

• Active TS/SCI with poly clearance or ability to obtain SCI with poly.
• Bachelor's + 8 years relevant experience or Master's + 6 years.
• Active Security+ (DoD 8570 IAT II) certification.
• Ability to learn ITGC, FISCAM, and NIST 800-53v4.
• Translate audit findings to technical and business stakeholders.

Responsibilities

• Design, develop, and implement IT corrective action plans (CAPs).
• Perform CAP validation testing for remediation activities.
• Conduct baseline reviews (FISCAM) to assess readiness.
• Monitor IT CAP statuses and third-party risk management.
• Develop risk-based prioritization of IT findings.
• Advise RMF activities and IT control implementations.
• Integrate leading practices for IT audit remediation.

Skills

IT audit

FISCAM

NIST 800-53

Risk assessment

Stakeholder management

Security+ (DoD 8570 IAT II)

Education

Bachelor's degree + 8 years experience

Master's degree + 6 years experience (4-year substitution)

Tools

Xacta

Configuration Management

Job description

IT Audit Advisory Consultant/FISCAM SME

Job Locations: US-VA-Herndon | US-MD-Riverdale | US-DC-Washington

Requisition ID: 2026-165501 | Position Category: Cyber Security | Clearance: Top Secret/SCI w/Poly

Responsibilities

We are seeking a highly skilled and experienced IT Audit Advisory Consultant/FISCAM SME to join our team. This position will require the candidate to work closely with government customers, contractor Project Lead, Information Systems Security Officer (ISSO), Application Vendor, and Application End Users. The role demands an individual who is proactive, detail-oriented, and capable of working independently while adhering to customer requirements and timelines.

• Design, develop, and implement IT corrective action plans (CAPs) for self-identified deficiencies (SIDs) and external IPA findings
• Perform CAP validation testing for completed remediation activities
• Perform baseline review assessments (e.g., FISCAM) to assess system readiness and remediate identified deficiencies
• Monitor, track, and report on IT CAP statuses and third-party risk management (e.g., service providers)
• Develop risk-based approaches for prioritization of IT findings
• Perform advisory services for risk management framework (RMF) activities to support system team IT control implementations in accordance with financial management overlay
• Integrate leading practices for IT audit remediation

Required Qualifications

• Clearance: TS/SCI with polygraph (or ability to obtain SCI and pass polygraph).
• Education/Experience: Bachelor's + 8 years relevant experience OR a Master's Degree and 6 years of relevant experience. An additional 4 years of experience may be considered in lieu of degree.
• Certification: Active Security+ (DoD 8570 IAT Level II).
• Other Skills:
  • Ability to learn IT general controls (ITGC), Financial Information System Control Audit Manual (FISCAM), and National Institute of Standards and Technology Special Publication (NIST) 800-53v4
  • Ability to understand IT audit finding recommendations to translate those requirements to functional/technical stakeholders
  • Ability to understand business processes in order to develop and implement new controls to mitigate or remediate identified IT audit gaps
  • Experience with risk analysis and assessment determinations incorporating system/mission owner, and unique operational constraints

Desired Qualifications

• Clear communicator with both technical and non-technical stakeholders.
• Ability to manage and prioritize tasks independently.
• Strong written/verbal communication.
• Experience with Xacta
• Familiar with Configuration Management
• Experience with effective policy, instruction, and development for Federal or DoD Information Security Programs
• Experience with performing Security Control Assessment in compliance with NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and other NIST 800 guide series

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and participation in an attractive bonus plan.

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.