Security Manager; TX DIR

Required Qualifications:

• 10 years of experience, may have supervisory or lead experience
• 8+ years of cybersecurity leadership experience on government IT contracts.
• TX-RAMP Level 2 or FedRAMP Moderate equivalent compliance experience — REQUIRED.
• Demonstrated experience withTAC Chapter 202 / Texas state cybersecurity requirements.
• Experience with CJIS Security Policy compliance, including:
• Personnel management
• Data security
• SOC 2 Type 2 audit management and corrective action experience.
• Demonstrated zero-trust architecture design and implementation experience.
• Experience with:
• Security incident response
• Threat hunting
• SIEM management
• Experience operating within multi-vendor government IT environments.
• Strong cybersecurity governance, risk management, compliance, architecture, and security operations experience.
• Ability to communicate security risks, incidents, remediation activities, and compliance status effectively to senior government and technical stakeholders.
• CISSP certification-CISM acceptable in lieu of CISSP
• CJIS Security Addendum compliance certification or equivalent experience
• Must be a US Citizen

Peraton is hiring a Security Manager.

The qualified candidate will provide security leadership across the contract, including security policy, procedures, planning, evaluation, technology, compliance, incident management, vulnerability management, and GRC. The Security Director coordinates through the Technical Director.

Candidates must be located in the Austin, TX metropolitan area, orSan Angelo, TX as applicable or willing to relocate to the Austin, TX metropolitan area.

• Overall accountability for security policy, procedures, planning, evaluation, and technology.
• Track, remediate, and report oncurrent and emerging threats and trends to DIR.
• Work with the Technical Director and DIRto address current and planned future threats.
• Provide compliance oversight for:
• TX-RAMP Level 2
• TAC 202
• CJIS
• IRS Publication 1075
• MARS-E
• Coordinate theannual SOC 2 Type 2 audit.
• ManageSOC 2 Type 2 corrective action plans.
• Track, report, and remediate security incidents in accordance withTAC Chapter 202.
• Develop theannual security plan.
• Integrate security activities withGRC processes.
• Oversee vulnerability scanning.
• Conductquarterly Master Security Baseline Configuration Health Checks.
• Provide security governance and accountability across a complex multi-vendor government IT environment.
• Coordinate with technical and service delivery leadership on security risks, remediation, compliance, and emerging threats.

The successful candidate should be able to provide leadership and oversight across:

• TX-RAMP Level 2
• FedRAMP ModerateTAC Chapter 202
• CJIS Security Policy
• IRS Publication 1075
• MARS-ESOC 2
• Type 2
  
  Zero-Trust Architecture
• SIEM / Threat Hunting Security
• Incident Response Vulnerability ManagementGRC