IT Audit Advisory Consultant - FISCAM SME (TS/SCI)

Peraton; Herndon (VA); On-site; USD 135,000 - 216,000; Full time

Benefits offered by this job

25 days PTO

Bonus plan

Job summary

Peraton is seeking an IT Audit Advisory Consultant/FISCAM SME to support government customers and project teams across Herndon, Riverdale, and Washington, D.C. You will design CAPs, perform validation, and advise on RMF and ITGC controls while coordinating with ISSO, vendors, and end users.

The role requires a strong analytical mindset, ability to work independently, and experience with NIST 800-53 guidance, FISCAM, and audit remediation.

Qualifications

• Clearance TS/SCI with polygraph or ability to obtain SCI and pass polygraph.
• Bachelor's or Master's with years of relevant experience as described.
• Active Security+ (DoD 8570 IAT II) certification.
• Ability to learn IT general controls (ITGC), FISCAM, and NIST 800-53v4.
• Ability to translate audit findings into actionable requirements.
• Experience with risk analysis and assessment determinations.

Responsibilities

• Design, develop, and implement IT corrective action plans (CAPs) for SIDs and IPA findings.
• Perform CAP validation testing for remediation activities.
• Perform baseline reviews (e.g., FISCAM) to assess readiness and remediate deficiencies.
• Monitor, track, and report IT CAP statuses and third-party risk (e.g., service providers).
• Develop risk-based prioritization for IT findings.
• Provide advisory RMF support for IT controls.
• Integrate leading practices for IT audit remediation.

Skills

TS/SCI with polygraph

Security+ (DoD 8570 IAT II)

ITGC

FISCAM

NIST 800-53v4

Risk analysis

RMF

translate findings to stakeholders

Education

Bachelor's degree

Master's degree

Tools

Xacta

Job description

Peraton is seeking an IT Audit Advisory Consultant/FISCAM SME to support government customers and project teams across Herndon, Riverdale, and Washington, D.C. You will design CAPs, perform validation, and advise on RMF and ITGC controls while coordinating with ISSO, vendors, and end users.

The role requires a strong analytical mindset, ability to work independently, and experience with NIST 800-53 guidance, FISCAM, and audit remediation.