Remote Security Compliance & Risk Administrator

Peraton; United States; Remote; USD 51,000 - 82,000; Full time

Benefits offered by this job

Full benefits package

Job summary

Peraton in the United States is seeking an experienced Security Administrator to maintain a continuous compliance posture across NIST SP 800-53 Rev. 5, HIPAA, and CMS requirements.

The role focuses on security policy management, audit support, and third-party risk oversight within the SGS team. You will lead policy updates, control evidence, and vendor risk assessments while coordinating with security leadership, privacy stakeholders, and external assessors.

Qualifications

• 2 years with BS/BA or 6 years with a HS diploma/equivalent
• Security governance, risk, and compliance (GRC), third-party risk management, audit support, and data protection.
• Experience performing control assessment and gap analysis against NIST SP 800-53 Rev. 5, and managing the POA&M lifecycle
• Vendor and Application security risk management experience.
• Authoring ability for policies, control narratives, and deficiency documentation that withstands external review.
• Strong analytical and problem-solving skills, with excellent communication and stakeholder collaboration abilities.
• US citizenship required.

Responsibilities

• Author, maintain, and update security policies, procedures, standards, plans, and control documentation for the SGS Contracts environment.
• Perform control testing and gap analysis against NIST SP 800-53 Rev. 5, HIPAA/HITECH and the CMS ARS and PIM.
• Document deficiencies and manage the Plan of Action & Milestones (POA&M) lifecycle from identification through verified closure
• Respond to Known Exploited Vulnerabilities (KEVs), CCIC bulletins, and compliance data calls
• Support maintenance of the control evidence library and GRC platform records, control mappings, and compliance reporting using CFACTs.
• Serve as the operational-side evidence provider for annual independent assessments and CMS reviews.
• Support Security Assessment preparation and security assessment report development
• Ensure audit-readiness on any given day rather than reconstructed compliance
• Conduct vendor security due diligence and assessments.
• Perform contract and control reviews, continuous monitoring, and risk reporting
• Manage vendor security questionnaires and ongoing compliance verification
• Administer SMM platform documentation, audit activities, and training programs
• Serve as application owner liaison or support PMO coordination for SMM-related activities
• Support application ID administration and controls
• Generate and audit Lenel access control reports on a weekly and monthly basis
• Conduct group audits and access reviews.
• Support training and onboarding activities
• Leverage SharePoint and PowerApps knowledge to streamline workflows and reporting
• Participate and support change control boards; evaluate applications; participate in technical solutioning and evaluation
• Support program operations which may include and is not limited to; leading small projects and initiatives, supporting business capture and growth, and providing cross functional support
• Telework available from EST, MST or CST.time zones.

Skills

GRC

Third-party risk

Audit support

Policy management

Data protection

Project management

Stakeholder communication

Security governance

Education

Bachelor's degree in Computer Science, Software Engineering

Tools

SharePoint administration

PowerApps development

Job description

Peraton in the United States is seeking an experienced Security Administrator to maintain a continuous compliance posture across NIST SP 800-53 Rev. 5, HIPAA, and CMS requirements.

The role focuses on security policy management, audit support, and third-party risk oversight within the SGS team. You will lead policy updates, control evidence, and vendor risk assessments while coordinating with security leadership, privacy stakeholders, and external assessors.