Risk/ Security Controls Assessment and Remediation Manager

Peraton

4d•$80,000 - $128,000

About The Position

Peraton seeks innovative professionals who thrive in mission-critical environments and are passionate about protecting our national critical infrastructure. This is your chance to make an impact on one of the nation’s vital organizations, working alongside leaders in cybersecurity engineering, operations, forensics, threat analysis, data science, and systems integration. Join Peraton in supporting a large critical infrastructure operator to defend its corporate and operations networks from nation-state attacks, ensure the confidentiality, integrity, and availability of its systems and operations infrastructure, and comply with federal and industry cybersecurity regulation. As a Risk / security controls assessment and remediation manager working along side a state of the art 24-hour Cybersecurity Operations Center (CSOC), you will be responsible for leading the assessment, validation, and remediation of security controls across the organization. This role ensures that security risks are identified, prioritized, and effectively mitigated in alignment with regulatory requirements, security frameworks, and organizational risk tolerance.

Requirements

U.S. Citizenship Required
Must have the ability to obtain / maintain a DOE L Level or DOE Secret clearance
Degree in computer science, engineering, cybersecurity, information technology, risk management or related field
5 years of experience with BS/BA; 3 years with MS/MA
Experience in cybersecurity compliance, analyst, governance, or risk management roles
Understanding of industry cybersecurity standards such as FISMA, NIST 800 series, ISO 27001 and regulatory compliance requirements
Experience with vulnerability assessment, enterprise risk assessments, and remediation workflows
Ability to analyze scan results and control findings to determine true risk to the organization
Experience creating and managing POA&Ms or remediation plans
Familiarity with patch management and configuration remediation processes
Ability to lead cross-functional remediation efforts without direct authority
Experience coordinating with engineering, IT, security, and compliance teams
Strong project management and prioritization skills
Strong analytical and problem-solving skills

Nice To Haves

Hold technical and/or cybersecurity certification such as CISSP, GIAC GSEC, GIAC GCIH, CISA SSCP, CompTIA Security+
A master's degree in computer science, engineering, cybersecurity, information technology, or related field

Responsibilities

Lead security control assessments across systems, applications, and infrastructure
Evaluate the effectiveness of technical, administrative, and operational security controls
Identify control gaps, weaknesses, and residual risk
Develop, track, and manage remediation plans in coordination with system owners
Prioritize remediation efforts based on risk, impact, and business context
Validate remediation actions and confirm control effectiveness post-fix
Maintain risk registers, control assessment documentation, and remediation evidence
Support internal and external audits, assessments, and regulatory inquiries
Communicate risk posture, trends, and remediation status to leadership
Work with stakeholders to continuously improve assessment and remediation processes and methodologies
Stay current on emerging threats and incorporate lessons learned into recommendations to policies, procedures, and cybersecurity systems and network modifications
Prepare reports and brief CSOC Manager, infrastructure stakeholders and corporate management on requests
Contribute to the development and periodic review of security policies, standards, and control procedures
Provide advisory support to system owners and project teams during system design or major changes
Participate in tabletop exercises, risk workshops, and threat modeling sessions as a controls SME
Support onboarding and training of staff on control assessment and remediation processes
Assist with defining control metrics, KPIs, and maturity indicators
Review and provide input on third-party risk assessments and vendor security reviews
Support merger, acquisition, organizational role changes or system onboarding activities from a risk and controls perspective
Track emerging threats, regulatory changes, and framework updates to inform assessment strategy
Mentor junior risk analysts or assessment team members
Support executive reporting and briefings on risk trends and remediation progress