Security Manager (TX DIR)

Peraton; Town of Texas (WI); On-site; USD 140,000 - 190,000; Full time

Job summary

Peraton is hiring a Security Manager. The qualified candidate will provide security leadership across the contract, including security policy, procedures, planning, evaluation, technology, compliance, incident management, vulnerability management, and GRC.

The Security Director coordinates through the Technical Director. Candidates must be located in the Austin, TX metropolitan area or willing to relocate to Austin, TX, and must be a US Citizen.

Qualifications

• 10+ years of experience in security leadership on government IT contracts.
• 8+ years of cybersecurity leadership experience on government IT contracts.
• TX-RAMP Level 2 or FedRAMP Moderate compliance experience required.
• Experience with CJIS Security Policy compliance, including personnel management and data security.
• SOC 2 Type 2 audit management and corrective action experience.
• Demonstrated zero-trust architecture design and implementation experience.
• Experience across multi-vendor government IT environments.
• Ability to communicate security risks to senior government and technical stakeholders.
• CISSP certification or CISM acceptable in lieu of CISSP.
• CJIS Security Addendum certification or equivalent experience.
• Must be a US Citizen.

Responsibilities

• Overall accountability for security policy, procedures, planning, evaluation, and technology.
• Track, remediate, and report on current and emerging threats to DIR.
• Coordinate with Technical Director and DIR to address threats.
• Provide compliance oversight for TX-RAMP Level 2, TAC 202, CJIS, IRS Publication 1075, MARS-E.
• Coordinate the annual SOC 2 Type 2 audit.
• Manage SOC 2 Type 2 corrective action plans.
• Track, report, and remediate security incidents in accordance with TAC Chapter 202.
• Develop the annual security plan and integrate with GRC processes.
• Oversee vulnerability scanning and quarterly health checks.
• Coordinate with technical and service delivery leadership on security risks, remediation, compliance, and emerging threats.

Job description

Required Qualifications:

• 10 years of experience, may have supervisory or lead experience
• 8+ years of cybersecurity leadership experience on government IT contracts.
• TX-RAMP Level 2 or FedRAMP Moderate equivalent compliance experience — REQUIRED.
• Demonstrated experience withTAC Chapter 202 / Texas state cybersecurity requirements.
• Experience withCJIS Security Policy compliance, including:
• Personnel management
• Data security
• SOC 2 Type 2 audit management and corrective action experience.
• Demonstratedzero-trust architecture design and implementation experience.
• Experience with:
  • Security incident response
  • Threat hunting
  • SIEM management
• Experience operating withinmulti-vendor government IT environments.
• Strong cybersecurity governance, risk management, compliance, architecture, and security operations experience.
• Ability to communicate security risks, incidents, remediation activities, and compliance status effectively to senior government and technical stakeholders.
• CISSP certification-CISM acceptable in lieu of CISSP
• CJIS Security Addendum compliance certification or equivalent experience
• Must be a US Citizen

Peraton is hiring a Security Manager.The qualified candidate will provide security leadership across the contract, including security policy, procedures, planning, evaluation, technology, compliance, incident management, vulnerability management, and GRC. The Security Director coordinates through the Technical Director.

Candidates must be located in theAustin, TX metropolitan area, orSan Angelo, TX as applicable or willing to relocate to the Austin, TX metropolitan area.

Key Responsibilities:

• Overall accountability forsecurity policy, procedures, planning, evaluation, and technology.
• Track, remediate, and report oncurrent and emerging threats and trends to DIR.
• Work with theTechnical Director and DIRto address current and planned future threats.
• Provide compliance oversight for:
• TX-RAMP Level 2
• TAC 202
• CJIS
• IRS Publication 1075
• MARS-E
• Coordinate theannual SOC 2 Type 2 audit.
• ManageSOC 2 Type 2 corrective action plans.
• Track, report, and remediate security incidents in accordance withTAC Chapter 202.
• Develop theannual security plan.
• Integrate security activities withGRC processes.
• Overseevulnerability scanning.
• Conductquarterly Master Security Baseline Configuration Health Checks.
• Provide security governance and accountability across a complexmulti-vendor government IT environment.
• Coordinate with technical and service delivery leadership on security risks, remediation, compliance, and emerging threats.

Security Compliance and Expertise:

The successful candidate should be able to provide leadership and oversight across:

• TX-RAMP Level 2
• FedRAMP ModerateTAC Chapter 202
• CJIS Security Policy
• IRS Publication 1075
• MARS-ESOC 2
• Type 2Zero-Trust Architecture
• SIEM / Threat HuntingSecurity
• Incident ResponseVulnerability ManagementGRC