Senior Information Security Manager (ISSM) - NIST & GRC Lead

Peraton; Arizona; On-site; USD 150,000 - 230,000; Full time

Job summary

Peraton Labs is hiring an Information System Security Manager (ISSM) to be the single point of contact to Covered California, owning oversight and quality for every security service Peraton delivers to the CalHEERS system. You will lead a senior, multidisciplinary team across governance, security engineering, incident response, and risk management.

You will work with Covered California's CISO, project teams, stakeholders, and independent assessors to maintain CMS-ready security, compliance, and

Qualifications

• Bachelor's degree or equivalent combination of education, certification, and experience.
• 12+ years cybersecurity experience including managing security programs, teams, or major workstreams.
• Active CISSP or CISM certification.
• Experience managing security activities against the NIST SP 800-53 Rev. 5 control set in a complex environment.
• Experience owning a risk register and managing POA&Ms through closure using a GRC platform.
• Ability to lead and mentor senior technical personnel and brief cybersecurity risk credibly to technical and executive audiences.
• US Citizenship and the ability to pass a California background clearance before starting work.
• Master's degree in cybersecurity or related field (desired).
• PMP, CGRC, CRISC, CCSP certifications are valued.
• Hands-on experience with ARC-AMPE security/privacy requirements.
• Experience with IRS Publication 1075 compliance and FTI control management.
• CMS cybersecurity requirements and ATC processes experience.
• Experience with CalHEERS scale health enrollment systems.

Responsibilities

• Lead the security team and coordinate day-to-day information security activities across seven contracted service areas.
• Serve as primary client security liaison and deliver regular risk and escalation reporting to security leadership.
• Own the compliance and GRC engine, coordinating policies, standards, and risk registers.
• Drive risk closure by overseeing assessments, gap analyses, and POA&Ms.
• Coordinate incident response activities and coordinate investigations and communications.
• Oversee security reviews across cloud and on-premises environments and manage vendor due diligence.
• Coordinate independent assessments and penetration testing while preserving assessor independence.

Skills

Security leadership

Program management

Leadership

Stakeholder communication

NIST SP 800-53 Rev.5

GRC

Education

Bachelor's degree in cybersecurity / computer science / information systems / information technology / engineering

Master's degree (desired)

Tools

CISSP

GRC platform

PMP

CGRC

CRISC

CCSP

Job description

Peraton Labs is hiring an Information System Security Manager (ISSM) to be the single point of contact to Covered California, owning oversight and quality for every security service Peraton delivers to the CalHEERS system. You will lead a senior, multidisciplinary team across governance, security engineering, incident response, and risk management.

You will work with Covered California's CISO, project teams, stakeholders, and independent assessors to maintain CMS-ready security, compliance, and