Security Manager (TX DIR)

Peraton•Home, TX

4d•Hybrid

About The Position

Peraton is hiring a Security Manager. The qualified candidate will provide security leadership across the contract, including security policy, procedures, planning, evaluation, technology, compliance, incident management, vulnerability management, and GRC. The Security Director coordinates through the Technical Director. Candidates must be located in the Austin, TX metropolitan area, or San Angelo, TX as applicable or willing to relocate to the Austin, TX metropolitan area.

Requirements

10 years of experience, may have supervisory or lead experience
8+ years of cybersecurity leadership experience on government IT contracts.
TX-RAMP Level 2 or FedRAMP Moderate equivalent compliance experience — REQUIRED.
Demonstrated experience with TAC Chapter 202 / Texas state cybersecurity requirements.
Experience with CJIS Security Policy compliance, including: Personnel management, Data security
SOC 2 Type 2 audit management and corrective action experience.
Demonstrated zero-trust architecture design and implementation experience.
Experience with: Security incident response, Threat hunting, SIEM management
Experience operating within multi-vendor government IT environments.
Strong cybersecurity governance, risk management, compliance, architecture, and security operations experience.
Ability to communicate security risks, incidents, remediation activities, and compliance status effectively to senior government and technical stakeholders.
CISSP certification-CISM acceptable in lieu of CISSP
CJIS Security Addendum compliance certification or equivalent experience
Must be a US Citizen

Responsibilities

Overall accountability for security policy, procedures, planning, evaluation, and technology.
Track, remediate, and report on current and emerging threats and trends to DIR.
Work with the Technical Director and DIR to address current and planned future threats.
Provide compliance oversight for: TX-RAMP Level 2, TAC 202, CJIS, IRS Publication 1075, MARS-E.
Coordinate the annual SOC 2 Type 2 audit.
Manage SOC 2 Type 2 corrective action plans.
Track, report, and remediate security incidents in accordance with TAC Chapter 202.
Develop the annual security plan.
Integrate security activities with GRC processes.
Oversee vulnerability scanning.
Conduct quarterly Master Security Baseline Configuration Health Checks.
Provide security governance and accountability across a complex multi-vendor government IT environment.
Coordinate with technical and service delivery leadership on security risks, remediation, compliance, and emerging threats.
Provide leadership and oversight across: TX-RAMP Level 2, FedRAMP Moderate, TAC Chapter 202, CJIS Security Policy, IRS Publication 1075, MARS-E, SOC 2 Type 2, Zero-Trust Architecture, SIEM / Threat Hunting, Security Incident Response, Vulnerability Management, GRC.
Communicate security risks, incidents, remediation activities, and compliance status effectively to senior government and technical stakeholders.