Senior Information Privacy & Security Analyst

Peraton; Reston (VA); On-site; USD 86,000 - 138,000; Full time

Job summary

Peraton is seeking an Information Privacy and Security Analyst to join its Citizens Security & Public Services State and Local team in Virginia. The role supports the Texas Integrated Eligibility Redesign System by implementing and maintaining information security measures to protect computer systems, networks, and data.

The position emphasizes coordinating ARC-AMPE security audits, monitoring CISA alerts, applying NIST/ARC/AMPE controls, and collaborating with customer stakeholders to ensure

Qualifications

• Bachelor's degree and 2 years of experience, OR 6 years with a HS Diploma/equivalent.
• Familiarity with IT security policies, standards, and procedures.
• Basic knowledge of business continuity and disaster recovery concepts.
• Exposure to risk assessment processes or data processing security practices.
• Understanding of common security tools and measures (firewalls, data encryption, access controls).
• Ability to document security findings and assist in preparing reports and recommendations.
• Strong written and verbal communication skills; ability to explain security concepts in straightforward terms.
• Ability to manage and track multiple stakeholder deliverables and deadlines in a structured, organized manner.
• Comfortable working directly and independently with customer stakeholders.
• Must be a US Citizen or a Green Card Holder.

Responsibilities

• Coordinate customer responses to ARC-AMPE and other security audits, serving as the primary point of contact between the customer Security Team and customer support teams.
• Develop deep familiarity with the ARC-AMPE security controls and their applicability to the customer environment.
• Develop working knowledge of the customer support teams responsible for responding to each control area and maintain awareness of roles and responsibilities across teams.
• Manage and monitor audit responses in the Archer GRC system, ensuring responders submit within required timeframes.
• Meet regularly with control responders to provide consulting assistance on control interpretation, evidence determination, and submission requirements.
• Subscribe to and monitor CISA and other OEM security alerts for applicability to the customer infrastructure.
• Correlate incoming CISA notifications against the customer architecture; when applicable, communicate findings to the customer within 48 hours of notice.
• Consult with customer on cyber threat remediations as requested.
• Assist in implementing security measures to protect computer systems, networks, and data in accordance with established policies and standards.
• Support efforts to prevent data loss and service interruptions by researching and evaluating new technologies to protect the environment.
• Help ensure all networks have adequate security controls to prevent unauthorized access.
• Maintain security system documentation and assist in keeping security systems current with software or hardware changes.
• Support application security assessments using off-the-shelf tools under general guidance.
• Assist in preparing vulnerability assessment documentation and contributing to security assessment reports.
• Participate in project-related conference calls and security review meetings, providing supporting information as needed.
• Conduct research to identify and understand new threats, vulnerabilities, and exploits, and report findings to the appropriate internal or customer stakeholders.
• Follow established procedures to help ensure the safety of information systems assets and protect systems from intentional or inadvertent access or destruction.
• Support the application of security frameworks including NIST 800-37, NIST 800-53, ARC/AMPE controls, POA&Ms, and Corrective Action Plans under general direction.
• Assist the project team with Disaster Recovery (DR) planning, Business Continuity Plan (BCP), and Continuity of Operations (COOP) documentation and assessments.
• Help prepare impact assessment reports documenting security incidents and contributing to remediation documentation.
• Assist in creating and maintaining standard operating procedure documents in adherence to security policies and standards.
• Document violations of computer security procedures and elevate findings to the appropriate internal or customer stakeholders.
• Interact with users to gather information on computer data access needs and assist in addressing routine security questions.

Skills

IT security concepts

Security policies & standards

Risk assessment familiarity

Security tools awareness

Stakeholder communication

Education

Bachelor's degree

HS Diploma / equivalent

Tools

Archer GRC

Job description

Peraton is seeking an Information Privacy and Security Analyst to join its Citizens Security & Public Services State and Local team in Virginia. The role supports the Texas Integrated Eligibility Redesign System by implementing and maintaining information security measures to protect computer systems, networks, and data.

The position emphasizes coordinating ARC-AMPE security audits, monitoring CISA alerts, applying NIST/ARC/AMPE controls, and collaborating with customer stakeholders to ensure