Information Security Administrator
Peraton · UNAVAILABLE, UNAVAILABLE, US
About this role
## Information Security Administrator ### Overview Peraton is seeking an experienced **Security Administrator** to support continuous compliance and security administration activities for the **SafeGuard Services (SGS)** team (a Peraton subsidiary). This role focuses on audit support, policy management, and third-party risk oversight aligned to frameworks including **NIST SP 800-53 Rev. 5** and **HIPAA**. ### Responsibilities / What You’ll Do - **Security Compliance & Policy Management** - Author, maintain, and update security policies, procedures, standards, plans, and control documentation for SGS contract environments - Perform control testing and gap analysis against **NIST SP 800-53 Rev. 5**, **HIPAA/HITECH**, and **CMS ARS/PIM** - Document deficiencies and manage the **POA&M** lifecycle (identification through verified closure) - Respond to **Known Exploited Vulnerabilities (KEVs)**, **CCIC bulletins**, and compliance data calls - **Audit & Assessment Support** - Maintain the control evidence library and **GRC platform** records, control mappings, and compliance reporting (using **CFACTs**) - Provide operational-side evidence for annual independent assessments and CMS reviews - Support security assessment preparation and report development - Maintain audit-readiness continuously (not reconstructed) - **Third-Party & Vendor Risk Management** - Conduct vendor security due diligence and assessments - Perform contract/control reviews, continuous monitoring, and risk reporting - Manage vendor security questionnaires and ongoing compliance verification - **Security Management & Monitoring (SMM) Administration** - Administer SMM platform documentation, audit activities, and training programs - Serve as an application owner liaison and/or support PMO coordination for SMM activities - Support application ID administration and controls - **Physical Security & Access Control** - Generate and audit **Lenel** access control reports weekly and monthly - Conduct group audits and access reviews - Support training and onboarding activities - **Program & Administrative Support** - Use **SharePoint** and **PowerApps** to streamline workflows and reporting - Participate in change control boards; evaluate applications; support technical solutioning - Support program operations, including small projects/initiatives and cross-functional support ### Telework Telework available from **EST, MST, or CST** time zones. ### Qualifications **Basic Qualifications** - **2 years with BS/BA** or **6 years with HS diploma/equivalent** - Security Administration experience with ability to work flexible hours - Experience in **GRC**, **third-party risk management**, **audit support**, and **data protection** - Experience performing control assessment/gap analysis against **NIST SP 800-53 Rev. 5** and managing the **POA&M** lifecycle - Vendor and application security risk management experience - Ability to author policies, control narratives, and deficiency documentation suitable for external review - Strong analytical/problem-solving skills and excellent communication/stakeholder collaboration - **U.S. citizenship required** **Desired Qualifications** - Bachelor’s degree in **Computer Science**, **Software Engineering**, or related field - Working knowledge of **HIPAA/HITECH** - CMS experience, including **Authority to Connect/Operate** support (e.g., **SAWs**, security assessment reports, control evidence packages) - E
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.