Information Privacy and Security, Senior Associate

Peraton is a national security and enterprise IT company serving government agencies and the U.S. armed forces. The Information Privacy and Security Analyst supports the Texas Integrated Eligibility Redesign System Security Team by coordinating security audits, monitoring security alerts, assisting with vulnerability and application security assessments, and maintaining security documentation and compliance activities.

Responsibilities:

• Coordinate customer responses to ARC-AMPE and other security audits, serving as the primary point of contact between the customer Security Team and customer support teams
• Develop deep familiarity with the ARC-AMPE security controls (a curated subset of NIST 800-53 controls) and their applicability to the customer environment
• Develop working knowledge of the customer support teams responsible for responding to each control area and maintain awareness of roles and responsibilities across teams
• Manage and monitor audit responses in the Archer GRC system, ensuring responders submit within required timeframes
• Meet regularly with control responders to provide consulting assistance on control interpretation, evidence determination, and submission requirements
• Subscribe to and monitor CISA and other OEM security alerts for applicability to the customer infrastructure
• Correlate incoming CISA notifications against the customer architecture; when applicable, communicate findings to the customer within 48 hours of notice
• Consult with customer on cyber threat remediations as requested
• Assist in implementing security measures to protect computer systems, networks, and data in accordance with established policies and standards
• Support efforts to prevent data loss and service interruptions by researching and evaluating new technologies to protect the environment
• Help ensure all networks have adequate security controls to prevent unauthorized access
• Maintain security system documentation and assist in keeping security systems current with software or hardware changes
• Support application security assessments using off-the-shelf tools under general guidance
• Assist in preparing vulnerability assessment documentation and contributing to security assessment reports
• Participate in project-related conference calls and security review meetings, providing supporting information as needed
• Conduct research to identify and understand new threats, vulnerabilities, and exploits, and report findings to the appropriate internal or customer stakeholders
• Follow established procedures to help ensure the safety of information systems assets and protect systems from intentional or inadvertent access or destruction
• Support the application of security frameworks including NIST 800-37, NIST 800-53, ARC/AMPE controls, POA&Ms, and Corrective Action Plans under general direction
• Assist the project team with Disaster Recovery (DR) planning, Business Continuity Plan (BCP), and Continuity of Operations (COOP) documentation and assessments
• Help prepare impact assessment reports documenting security incidents and contributing to remediation documentation
• Assist in creating and maintaining standard operating procedure documents in adherence to security policies and standards
• Document violations of computer security procedures and escalate findings to the appropriate internal or customer stakeholders
• Interact with users to gather information on computer data access needs and assist in addressing routine security questions

Requirements:

• Bachelor's degree and 2 years of experience, OR 6 years with a HS Diploma/equivalent
• Familiarity with IT security policies, standards, and procedures
• Basic knowledge of business continuity and disaster recovery concepts
• Exposure to risk assessment processes or data processing security practices
• Understanding of common security tools and measures (firewalls, data encryption, access controls)
• Ability to document security findings and assist in preparing reports and recommendations
• Strong written and verbal communication skills; ability to explain security concepts in straightforward terms
• Ability to manage and track multiple stakeholder deliverables and deadlines in a structured, organized manner
• Comfortable working directly and independently with customer stakeholders
• Must be a US Citizen or a Green Card Holder
• Completion of information security training such as CompTIA Security+ or equivalent entry/mid-level certification
• Familiarity with NIST frameworks, ARC/AMPE controls, or federal/state security compliance requirements
• Experience working in a government IT or state agency environment
• Experience with Archer GRC or similar GRC platform
• Familiarity with CISA alert monitoring, threat intelligence feeds, or OEM security notifications
• Experience coordinating security audit responses or supporting compliance activities in a government IT environment
• Familiarity with GRC platforms; experience with Archer GRC preferred