SITEC - Information Systems Security Officer - Little Creek, VA

• Work with a team of IT risk management assessors performing IT risk and controls assessments using government governance & guidance and organizational policy & procedures
• Performing walkthrough interviews and maintaining communication with a variety of client stakeholders, including Subject Matter Experts (SMEs) such as system and database administrators
• Requesting, obtaining, reviewing, and analyzing a variety of artifacts to assist in executing IT controls testing such as security plans, SOPs, system screenshots, and system configuration settings
• Evaluating the design and operating effectiveness of IT controls using provided artifacts, industry-standard guidance, leading practices, and professional judgement
• Documenting the results of IT controls test work in a consistent and high-quality manner that would allow a reviewer to repeat the test and reach the same conclusion
• Summarizing and communicating IT controls assessment results to a variety of client stakeholders, including senior leadership personnel
• Planning and executing day-to-day activities of IT controls assessments individually and as part of a team
• Working with client personnel to understand and analyze known IT control weaknesses, identify root causes, and develop detailed, robust remediation plans
• Providing subject matter expertise to client personnel on all matters relating to IT controls and responding to ad-hoc IT controls requests from client personnel
• Implement and manage continuous monitoring programs to ensure ongoing security of information systems.
• Extensive experience with Risk Management Framework (RMF) process and 800-53, 37
• Experience creating and updating Security Assessment and Authorization (SA&A) artifacts such as FIPS 199, Contingency Plans (CP), Contingency Plan Tests (CPT), and System Security Plans (SSP).
• Knowledge and experience in IT risk and controls through IT audits, IT control assessments, and IT security reviews.
• Working knowledge of FISMA, NIST SP 800 series, FISCAM, and other relevant Federal information assurance laws, regulations, and guidance.
• Experience performing FISMA, OMB Circular A-123, or similar internal control assessments
• Understanding of other security frameworks like FedRAMP and DISA DCAS
• Understanding of the DoD Cloud Computing Security Requirements Guide and other DoD STIG/SRGs, including experience in working with STIG Viewer toolset
• Proficiency in eMASS
• Proficiency in Microsoft Excel, Word, and PowerPoint

Qualifications: 

• BS + 8 years of experience OR MS + 6 years of experience OR PHD with 3 years of experience

  OR HS with 12 years of experience OR AA with 10 years of experience.

• DoD TS/SCI or higher clearance is required.
• Required certification: DoDD 01-M IAT II.
• 3 or more years of relevant experience related to IT Risk Management, Information System Security, and/or Cybersecurity.

#SITEC2025

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.