Senior Information Security Program Lead

Peraton; Herndon (VA); On-site; USD 135,000 - 216,000; Full time

Job summary

Peraton is seeking an Information System Security Manager (ISSM) to lead a senior security team supporting Covered California and CalHEERS. You will own oversight of security services, ensure compliance with NIST SP 800-53 Rev.

5, ARC-AMPE and IRS 1075, and coordinate risk and incident response with stakeholders. The role requires deep expertise in governance, risk, and compliance, and interaction with client leadership to communicate risk credibly and drive secure outcomes for health

Qualifications

• Bachelor's degree in cybersecurity, computer science, information systems, information technology, or engineering, or equivalent combination.
• 12+ years of progressively responsible cybersecurity experience.
• Active CISSP or CISM certification.
• Experience managing security activities against the NIST SP 800-53 Rev. 5 control set.
• Experience owning a risk register and managing POA&Ms, findings, and corrective action plans through closure using an enterprise GRC platform.
• Ability to lead and brief cybersecurity risk credibly to technical and executive audiences.
• US Citizenship and ability to pass a California criminal background clearance before starting work.

Responsibilities

• Lead the security team and coordinate day-to-day activities across seven contracted service areas.
• Serve as the primary client security liaison and deliver regular status, risk, and escalation reporting.
• Own the compliance and GRC engine; manage policies, procedures, standards, and plans.
• Drive risk down to closure; oversee risk assessments, control reviews, and POA&Ms.
• Serve as backup incident manager and coordinate investigations and post-incident review.
• Coordinate security work across cloud and on-premises environments; manage vendor due diligence and assessments.
• Coordinate assessment and penetration testing logistics while preserving assessor independence.

Skills

Security team leadership

Client security liaison

NIST SP 800-53 Rev.5

GRC management

POA&M tracking

Incident response coordination

Technical risk briefing

Vendor security due diligence

Education

Bachelor's degree in cybersecurity, computer science, information systems, information technology, or engineering

Tools

GRC platform

Job description

Peraton is seeking an Information System Security Manager (ISSM) to lead a senior security team supporting Covered California and CalHEERS. You will own oversight of security services, ensure compliance with NIST SP 800-53 Rev.

5, ARC-AMPE and IRS 1075, and coordinate risk and incident response with stakeholders. The role requires deep expertise in governance, risk, and compliance, and interaction with client leadership to communicate risk credibly and drive secure outcomes for health