Information Assurance and Security Senior Manager

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Responsibilities

Position Overview

The Contractor Lead will provide governance, risk, and compliance (GRC) oversight across enterprise cybersecurity programs, with a primary focus on dashboarding, RMF reporting, assessment quality, and ensuring accurate data flows from cyber compliance tools. The role requires a seasoned professional capable of leading compliance operations, synthesizing complex security information for senior leadership, and coordinating with technical teams across multiple organizational units including geographically dispersed plants and laboratories to support enterprise-wide cybersecurity outcomes.

Drawing on experience in risk assessment, vulnerability scanning, compliance auditing, COMSEC operations, and secure communications management, the Contractor Lead will ensure that cybersecurity posture is accurately measured, effectively communicated, and continuously improved. The position will interface with federal division directors, cybersecurity teams, and mission stakeholders to maintain high standards of data integrity, reporting quality, and regulatory alignment.

Key Responsibilities

• Lead development and maintenance of enterprise GRC dashboards to provide meaningful, accurate visualization of compliance posture, vulnerabilities, risks, and RMF control status.
• Translate complex technical information into executive-level summaries and visual reports, leveraging experience communicating COMSEC and cybersecurity data to leadership.
• Ensure dashboards reflect real-time, authoritative data sources by validating integrity and relevance of feeds from vulnerability scanning tools, compliance repositories, and RMF systems.
• Oversee reporting across all steps of the Risk Management Framework, ensuring visibility into control inheritance, implementation status, and authorization milestones.
• Support structured reporting cycles using background in RMF-aligned risk assessments, compliance audits, and mitigation planning.
• Ensure cyber compliance tools provide accurate and relevant data for enterprise reporting; validate and troubleshoot data flows as needed.
• Apply experience managing inventories, access control, encryption devices, and audit logs to improve data quality from compliance tools.
• Oversee the quality of assessment and authorization (A&A) activities by developing standardized review procedures and ensuring documentation accuracy.
• Guide teams in interpreting control requirements, developing remediation plans, and validating evidence to support authorization decisions.
• Collaborate across departments, national laboratories, and plant sites to align compliance workflows and reporting expectations.
• Build productive relationships with senior leadership, technical staff, contractors, and compliance stakeholders to synchronize cybersecurity efforts.
• Mentor junior personnel and support process improvement initiatives that enhance the maturity of the GRC and RMF programs.

Qualifications

Required Qualifications:

• 10+ years of experience in cybersecurity governance, compliance, RMF execution, or related fields.
• Experience developing dashboards, compliance visualizations, or executive reporting products.
• Strong familiarity with RMF, GRC methodologies, vulnerability management tools, and compliance tracking systems.
• Demonstrated experience communicating cybersecurity requirements to leadership, peers, and subordinate personnel.
• Active TS clearance with SCI suitability and the ability to obtain Q.
• Ability to work collaboratively across geographically distributed sites and diverse mission environments.

Preferred Qualifications:

• Experience supporting DOE, DOE-IN, NNSA, or other high-security federal mission environments.
• Bachelor’s degree in cybersecurity, information assurance, or related discipline; advanced degree preferred.
• Experience in COMSEC management, access control, and configuration of encryption devices.
• Familiarity with contractor oversight, and performance monitoring.
• Experience conducting audits, vulnerability assessments, and compliance reviews.
• Experience improving cybersecurity programs through structured reporting and process standardization.
• Active DOE Q clearance and SCI.

Target Salary Range

$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement

Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

Application Statements

The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.