Regulatory & Security Advisor - AI Vendor Compliance

Peraton; Reston (VA); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking an Information Assurance and Security Advisor to lead compliance for CMS FPS vendor evaluations and POC security inputs. You will ensure all security activities stay inside the FPS ATO boundary and align with CMS/FOA requirements.

You will coordinate with FPS security stakeholders, own SSP/POA&M/PIA artifacts, and advise on AI-specific compliance concerns, including data retention and logging. This role requires US citizenship and ability to obtain Public Trust clearance.

Qualifications

• Experience leading compliance work on Federal systems (CMS preferred).
• Deep knowledge of CMS security frameworks: CFACTS, CSRAP, and the ATO lifecycle.
• Practical experience with FISMA / NIST SP 800-53 control tailoring, inheritance from cloud providers (AWS FedRAMP baselines).
• Experience assessing third-party/vendor security posture: SOC 2, FedRAMP, HIPAA/HITRUST.
• US citizenship; ability to obtain and maintain a Public Trust clearance.

Responsibilities

• Assess CMS fraud prevention service candidates against CMS security posture, data-handling, and ATO requirements.
• Author security-and-compliance inputs to POC Solution proposal (control inheritance, boundary definition).
• Coordinate with FPS ISSO/ISSM and CMS security stakeholders to stay within FPS ATO boundary.
• Own compliance artifacts and cadence (SSP inputs, POA&M entries, PIA/SORN as applicable).
• Serve as the single point of contact for security-and-compliance questions from vendors/CMS/PM.
• Advise on LLM/agentic-AI compliance concerns (data retention, prompt/response logging, PHI-in-prompt controls).

Skills

CMS security frameworks

FISMA/NIST SP 800-53

Cloud security (AWS, Okta)

Security artifacts

Public Trust clearance

US citizenship

Education

BS/BA

MS/MA

PhD

Tools

AWS FedRAMP baselines

SOC 2

FedRAMP

HIPAA/HITRUST

CloudWatch/Splunk

Okta SSO/RBAC

Job description

Peraton is seeking an Information Assurance and Security Advisor to lead compliance for CMS FPS vendor evaluations and POC security inputs. You will ensure all security activities stay inside the FPS ATO boundary and align with CMS/FOA requirements.

You will coordinate with FPS security stakeholders, own SSP/POA&M/PIA artifacts, and advise on AI-specific compliance concerns, including data retention and logging. This role requires US citizenship and ability to obtain Public Trust clearance.