IT Compliance Manager - FISMA Audit - Mid

Peraton is seeking a Mid-Level IT Compliance Manager to serve as the dedicated FISMA Audit Preparation specialist. The IT Compliance Manager acts as the primary point of contact for approximately six DOJ OIG in-depth FISMA audits per year, facilitates written business responses to audit findings, develops action plans with key stakeholders, and ensures agency systems are defensible before federal auditors at all times. 

Location: Washington, DC

Responsibilities 

• Act as primary point of contact for DOJ OIG FISMA audits; coordinate pre-audit scheduling; maintain audit readiness calendar; certify readiness with documented scoring criteria 
• Deliver all time-bound reporting: Pre-Audit Notification Briefs 2 days prior, weekly status updates, Post-Audit Briefs within 5 business days, monthly CAP progress reports 
• Facilitate written business responses to audit findings; develop Corrective Action Plans within 30 days; maintain CAP registry; certify closure through documented verification 
• Maintain centralized evidence repository; fulfill evidence requests at 95% on-time delivery rate 
• Perform risk assessment analyses; verify compliance controls are incorporated into new implementations; track year-over-year finding trends 

#FederalCyberISaaS

Required Qualifications 

• Top Secret security clearance upon hire. The selected candidate must be eligible to obtain/maintain a TS/SCI clearance and successfully complete a polygraph examination if required by the customer.  Must be a U.S. Citizen.
• Bachelor's Degree in IT, Cybersecurity, CS, or related field. Additional years of experience may be considered in lieu of degree.
• Minimum 5 years in federal IT compliance or FISMA audit support at a cleared facility 

• Must meet applicable DoW 8140.03 qualification requirements for Security Control Assessor (SCA) (Work Role 612), Intermediate proficiency level, through at least one of the following:

  • Certification:

    • CGRC/CAP - Certified in Governance, Risk, and Compliance (Formerly known as CAP)

    • CISSO - Certified Information Systems Security Officer

    • Cloud+ - CompTIA Cloud plus

    • FITSP-A - Federal IT Security Professional-Auditor-NG

    • GCSA - GIAC Cloud Security Automation

    • GSEC - GIAC Security Essentials Certification

    • PenTest+ - CompTIA Penetration Tester plus

    • Security+ - CompTIA Security plus

    • SecurityX / CASP+ - CompTIA SecurityX (Formerly known as Advanced Security Practitioner plus [CASP+]); OR

  • Education: Bachelor’s degree or higher in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or a closely related field; OR

  • Training: Qualifying DoD-approved trainings

  • Advanced-proficiency certifications (CISSP, CISA, CySA+) also satisfy this requirement 

Preferred:  

• CISA strongly preferred | DOJ OIG audit experience | eMASS/Xacta/CSAM