Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Position Overview

The Contractor Lead will provide governance, risk, and compliance (GRC) oversight across enterprise cybersecurity programs, with a primary focus on dashboarding, RMF reporting, assessment quality, and ensuring accurate data flows from cyber compliance tools. The role requires a seasoned professional capable of leading compliance operations, synthesizing complex security information for senior leadership, and coordinating with technical teams across multiple organizational units including geographically dispersed plants and laboratories to support enterprise-wide cybersecurity outcomes.

Drawing on experience in risk assessment, vulnerability scanning, compliance auditing, COMSEC operations, and secure communications management, the Contractor Lead will ensure that cybersecurity posture is accurately measured, effectively communicated, and continuously improved. The position will interface with federal division directors, cybersecurity teams, and mission stakeholders to maintain high standards of data integrity, reporting quality, and regulatory alignment.

Key Responsibilities

• Lead development and maintenance of enterprise GRC dashboards to provide meaningful, accurate visualization of compliance posture, vulnerabilities, risks, and RMF control status.
• Translate complex technical information into executive-level summaries and visual reports, leveraging experience communicating COMSEC and cybersecurity data to leadership.
• Ensure dashboards reflect real-time, authoritative data sources by validating integrity and relevance of feeds from vulnerability scanning tools, compliance repositories, and RMF systems.
• Oversee reporting across all steps of the Risk Management Framework, ensuring visibility into control inheritance, implementation status, and authorization milestones.
• Support structured reporting cycles using background in RMF-aligned risk assessments, compliance audits, and mitigation planning.
• Ensure cyber compliance tools provide accurate and relevant data for enterprise reporting; validate and troubleshoot data flows as needed.
• Apply experience managing inventories, access control, encryption devices, and audit logs to improve data quality from compliance tools.
• Oversee the quality of assessment and authorization (A&A) activities by developing standardized review procedures and ensuring documentation accuracy.
• Guide teams in interpreting control requirements, developing remediation plans, and validating evidence to support authorization decisions.
• Collaborate across departments, national laboratories, and plant sites to align compliance workflows and reporting expectations.
• Build productive relationships with senior leadership, technical staff, contractors, and compliance stakeholders to synchronize cybersecurity efforts.
• Mentor junior personnel and support process improvement initiatives that enhance the maturity of the GRC and RMF programs.

Required Qualifications:

• 10+ years of experience in cybersecurity governance, compliance, RMF execution, or related fields.
• Experience developing dashboards, compliance visualizations, or executive reporting products.
• Strong familiarity with RMF, GRC methodologies, vulnerability management tools, and compliance tracking systems.
• Demonstrated experience communicating cybersecurity requirements to leadership, peers, and subordinate personnel.
• Active TS clearance with SCI suitability and the ability to obtain Q.
• Ability to work collaboratively across geographically distributed sites and diverse mission environments.

Preferred Qualifications:

• Experience supporting DOE, DOE-IN, NNSA, or other high-security federal mission environments.
• Bachelor’s degree in cybersecurity, information assurance, or related discipline; advanced degree preferred.
• Experience in COMSEC management, access control, and configuration of encryption devices.
• Familiarity with contractor oversight, and performance monitoring.
• Experience conducting audits, vulnerability assessments, and compliance reviews.
• Experience improving cybersecurity programs through structured reporting and process standardization.
• Active DOE Q clearance and SCI.

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.