Information Assurance and Security, Lead Associate
Peraton · Home, MO, US
About this role
## Lead Security Analyst — Information Assurance and Security ### Responsibilities - Lead security analysis, compliance oversight, and risk management for a complex, mission-critical program supporting the Health State and Local Sector. - Conduct comprehensive security assessments (system architecture, data flows, interfaces, and inherited controls). - Develop, maintain, and enforce program-wide security policies, procedures, and documentation aligned to Federal and CMS security requirements. - Manage the vulnerability assessment program (scanning, analysis, reporting, and remediation coordination). - Develop risk mitigation strategies and recommend actions to address findings from scans, assessments, POA&Ms, and audits. - Support security audits, reviews, and checkpoints, including CMS security assessments, FISMA reviews, and ATO activities. - Integrate security requirements into Agile development workflows; provide guidance to Scrum teams, architects, and developers. - Review technical designs, user stories, and system enhancements for security impacts and compliance alignment. - Monitor regulatory and CMS security updates to maintain current program compliance. - Collaborate with cross-functional stakeholders (engineering, operations, compliance, and program leadership) to deliver secure-by-design solutions. - Develop and deliver security awareness and compliance training tailored to program needs. - Maintain up-to-date security documentation, dashboards, and metrics reporting for program leadership. ### Qualifications **Basic Qualifications** - 5 years with BS/BA; or 9 years with a high school diploma. - Demonstrated experience leading security analysis, compliance, and risk management for large-scale Federal programs. - Strong understanding of Federal information security standards/frameworks, including **FISMA**, **NIST SP 800-53**, **NIST RMF**, and **CMS ARS**. - Hands-on experience conducting/managing vulnerability assessments, security scanning, POA&M lifecycle management, and risk mitigation planning. - Experience preparing for and supporting Federal security audits, assessments, and ATO activities. - Ability to review system designs, data flows, and architecture diagrams for security and compliance alignment. - Experience working with Agile teams and integrating security requirements into Agile SDLC processes. - Excellent written and verbal communication skills with technical and non-technical stakeholders. - **U.S. Citizenship required**. - Ability to obtain and maintain a **Public Trust** clearance. **Preferred Qualifications** - Experience supporting CMS programs (CMS ARS, ATO processes, and CMS governance expectations). - Relevant security certifications such as **CISSP**, **CISM**, **Security+**, **CEH**, or equivalent. - Experience with vulnerability management platforms, SIEM tools, and security automation technologies. - Healthcare IT experience; knowledge of **HIPAA** compliance requirements. - Experience modernizing systems with legacy dependencies. - Experience supporting large-scale, multi-team modernization/transformation initiatives. ### Peraton Overview Peraton is a next-generation national security company and transformative enterprise IT provider delivering trusted solutions to protect our nation and allies. ### Target Salary Range - **$66,000 – $106,000** (typical range) - Salary varies based on scope, responsibilities, experience, education, skills, competencies, geographic location, and contract/busi
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.