Security Governance & Compliance Specialist

Peraton; Reston (VA); Hybrid; USD 51,000 - 82,000; Full time

Benefits offered by this job

Parental leave

Paid time off

Paid holidays

Long term disability

401(k)

Job summary

Peraton is seeking an Information Security Administrator to lead security governance, risk management, and compliance across SGS environments. The role focuses on policy management, control evidence, and CMS/regulatory assessments, while coordinating with vendors and internal teams.

The ideal candidate will manage POA&M lifecycle, support independent assessments, and maintain audit-readiness, with telework options from EST/MST/CST time zones. US citizenship is required.

Qualifications

• 2 years with BS/BA or 6 years with a HS diploma/equivalent.
• Security governance, risk, and compliance (GRC), third-party risk management, audit support, and data protection.
• Experience performing control assessment and gap analysis against NIST SP 800-53 Rev. 5, and managing the POA&M lifecycle.
• Vendor and Application security risk management experience.
• Authoring ability for policies, control narratives, and deficiency documentation that withstands external review.
• US citizenship required.

Responsibilities

• Maintain security policies, procedures, standards, plans, and control documentation for SGS Contracts environment.
• Perform control testing and gap analysis against NIST SP 800-53 Rev. 5, HIPAA/HITECH and CMS ARS/PIM.
• Manage Plan of Action & Milestones (POA&M) lifecycle from identification through closure.
• Provide audit support and ensure readiness for CMS reviews and independent assessments.
• Conduct vendor security due diligence, assessments, and ongoing compliance verification.
• Administer SMM platform documentation, training programs, and PMO coordination for SMM activities.
• Audit Lenel access control reports and conduct access reviews.
• Leverage SharePoint and PowerApps to streamline workflows and reporting.
• Support program operations and cross-functional initiatives.

Skills

GRC

Third-party risk

Audit support

Data protection

Security governance

Education

Bachelor's degree in Computer Science or related field

Tools

SharePoint

PowerApps

Job description

Peraton is seeking an Information Security Administrator to lead security governance, risk management, and compliance across SGS environments. The role focuses on policy management, control evidence, and CMS/regulatory assessments, while coordinating with vendors and internal teams.

The ideal candidate will manage POA&M lifecycle, support independent assessments, and maintain audit-readiness, with telework options from EST/MST/CST time zones. US citizenship is required.