Information Privacy and Security Advisor

Peraton

. Lead security engineering, governance, risk, and compliance activities for mission-critical federal government systems .

Posted 10/13/2026full-timeWoodlawn • Maryland • United StatesSeniorLead💰 $104,000 - $166,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in security engineering, governance, risk management, and compliance for federal systems, with a strong focus on HIPAA, NIST frameworks, and vulnerability management. Proven ability to lead security architecture and incident response while ensuring adherence to federal cybersecurity requirements.

Highest-signal resume keywords

Security Engineering LeadershipNIST SP 800-53 ComplianceVulnerability ManagementCloud Security ArchitectureIncident Response Management

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityRisk Management Framework (RMF)Security AssessmentControl TailoringData ClassificationEncryptionTokenizationAudit EngagementDocumentation SkillsContinuous Monitoring

Soft Skills

Problem-Solving MindsetInitiativeIndependent WorkCollaborationCommunication

Tools & Technologies

SIEMEDRAWS GovCloudAzure GovernmentDevSecOps ToolingMonitoring DashboardsConfiguration BaselinesZero Trust PrinciplesPolicy-as-CodeIaC Pipelines

Certifications & Qualifications

CISSPCISMCAPCCSPCASP+Security+AWS Security SpecialtyAzure Security Engineer Associate

Industry Keywords

HIPAA Security RuleCMS ARSOMB Circular A-130PHI/PII SafeguardingTIC 3.0FedRAMPDISA STIGsHealthcare ComplianceFederal GovernmentPublic Trust Clearance

Tech Stack

Tools & technologies

AWSAzureCloudCyber Security

About the role

Key responsibilities & impact

Lead security engineering, governance, risk, and compliance activities for mission-critical federal government systems
Oversee day-to-day operational security and ensure adherence to federal cybersecurity and privacy requirements
Drive continuous security improvement across O&M and system enhancement workstreams
Partner with program leadership and operations teams to maintain Authority to Operate (ATO), safeguard PHI, and deliver compliant services
Own security architecture and control implementation across application, infrastructure, and cloud layers
Drive vulnerability management, remediation SLAs, patch governance, and configuration baselines
Lead end-to-end RMF activities, including security categorization, control tailoring, SSP, security assessment, POA&Ms, and continuous monitoring
Ensure compliance with HIPAA Security Rule, CMS ARS, OMB Circular A-130, and HHS policies
Coordinate audits, evidence collection, and control testing
Lead the PHI/PII incident response lifecycle, including triage, containment, eradication, recovery, forensics coordination, root cause analysis, and required reporting
Manage access control, identity, MFA, privileged access, vulnerabilities, monitoring dashboards, backup/restore, and disaster recovery exercises
Enforce data classification, encryption, key management, and tokenization
Contribute to risk registers and monthly security status reporting for CMS stakeholders
Translate complex security concepts into actionable guidance for technical and non-technical audiences
Collaborate with Program Management, Engineering, QA, Operations, and CMS counterparts
Contribute to security requirements for contract renewals and new contract bids

Requirements

What you’ll need

Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD
Experience in cybersecurity across engineering, compliance, and operations; 3+ years in security leadership/management on federal programs
Proven experience with NIST SP 800-53, RMF (NIST SP 800-37), FIPS 199/200, HIPAA Security Rule, OMB A-130, and CMS policy frameworks (e.g., CMS ARS)
Hands-on experience with SIEM/EDR, vulnerability management, cloud security architectures (AWS GovCloud/Azure Government), network segmentation, zero trust principles, and DevSecOps tooling
Strong documentation skills (SSP, ISRA, SAR, POA&M, Contingency Plans, runbooks, playbooks) and audit engagement
Must be a US Citizen
Must be able to obtain a Public Trust clearance
Preferred certifications: CISSP, CISM, CAP, CCSP, CASP+, Security+, or equivalent
Preferred cloud security certifications such as AWS Security Specialty or Azure Security Engineer Associate
Experience with TIC 3.0, NIST SP 800-63, NIST SP 800-30, DISA STIGs/CIS configuration baselines, and FedRAMP-aligned controls
Background in large-scale healthcare/Medicare environments and PHI/PII safeguarding
Familiarity with continuous ATO, automated compliance (policy-as-code), and modern IaC pipelines
Problem-solving mindset with the ability to take initiative and work independently
Comfortable in a fast-paced, iterative development environment
Experience working with the federal government, particularly CMS