Director of Information Assurance

<h2>Responsibilities</h2> <p>Peraton is seeking a seasoned security executive to serve as <strong>Director of Information Assurance</strong>, the senior IA leader accountable for Peraton's ISSM program across the company's classified computing environments. This role leads a distributed team of direct-report managers plus their ISSM/ISSO staff supporting programs across the Department of Defense and the Intelligence Community. The role sits within Peraton's Office of the CIO, inside the CISO organization, and reports to the Vice President, Chief Information Security Officer. </p> <p><strong>Key Responsibilities</strong> </p> <p><strong><em>Team leadership</em></strong> </p> <ul> <li>Lead and develop a distributed team of ISSMs and ISSOs across manager-led sub-teams; own hiring, performance, career development, and workforce planning. </li> </ul> <ul> <li>Appoint qualified ISSMs and ISSOs to individual systems and hold the cadre accountable for accreditation, continuous monitoring, and audit quality. </li> </ul> <ul> <li>Reinforce a culture of empowered front-line management and clear performance standards. </li> </ul> <ul> <li>Manage the function's labor and tooling spend. </li> </ul> <p><strong><em>Strategic priorities</em></strong> </p> <ul> <li>Continuously align the IA workforce to program demand by refining role definitions, balancing capacity across enclaves, and developing the team to support both current commitments and pipeline growth. </li> </ul> <ul> <li>Partner with Finance, Contracts, Compliance, and Program Management to convert appropriate IA roles from indirect to direct-charge where the business case supports it. </li> </ul> <ul> <li>Build the metrics and narrative that convey IA scope, demand signal, and resourcing risk to the business. </li> </ul> <ul> <li>Sustain and improve accreditation velocity, including ATO cycle time, POA&amp;M aging, and continuous monitoring rigor. </li> </ul> <p><strong><em>Accreditation oversight</em></strong> </p> <ul> <li>Provide enterprise oversight of the authorization lifecycle for classified networks and standalone systems for new ATOs, continuous ATO, reciprocity, and re-authorization. </li> </ul> <ul> <li>Set enterprise standards for RMF artifacts (SSPs, control assessments, SCTMs, POA&amp;Ms, contingency plans); engage AOs, SCAs, and sponsors on enterprise-level matters. </li> </ul> <ul> <li>Direct the risk assessment methodology (CNSSI 1253 / FIPS 199) applied to hardware and software proposed for program use. </li> </ul> <p><strong><em>Operations and compliance</em></strong> </p> <ul> <li>Establish and maintain enterprise standards for media protection, endpoint hardening, configuration management, vulnerability scanning, and security awareness for classified users. </li> </ul> <ul> <li>Direct the continuous monitoring program, including audit log review, control self-assessments, and independent audits. </li> </ul> <ul> <li>Ensure classified media handling and sanitization align with NIST SP 800-88 and program requirements. </li> </ul> <ul> <li>Maintain the IA training curriculum in coordination with the FSO and security education team. </li> </ul> <p><strong><em>Partnership and external engagement</em></strong> </p> <ul> <li>Interact with government security officials, Authorizing Officials, and program sponsors on security matters, reporting, and briefings. </li> </ul> <ul> <li>Represent Peraton in professional bodies such as CAISSWG, INSA, ND-ISAC, and NCMS. </li> </ul> <ul> <li>Operate fluently across 32 CFR Part 117 (NISPOM Rule), DFARS 252.204-7012, FISMA, NIST SP 800-53 Rev 5, DAAG, JSIG, ICD 503, ICD 502, ICD 705, and DoDM 8140.03. </li> </ul> <h2>Qualifications</h2> <p><strong>Required Qualifications:</strong></p> <ul> <li>Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field; Master's preferred. Equivalent combination of education and experience may substitute. </li> <li>16+ years of total professional experience </li> <li>10+ years of information security experience, including leading IA and system security operations in classified environments (DoD collateral and/or SCI) with responsibility overseeing hiring, performance, and career development.  Managing geographically dispersed team experience preferred. </li> <li>Demonstrated track record overseeing teams that have obtained and maintained ATOs from DCSA, DoD, and/or IC Authorizing Officials. </li> <li>Active TS clearance with the ability to obtain an SCI </li> <li>DoDM 8140.03 IAM Level III certification — CISSP, CISM, GSLC, or equivalent. </li> <li>Executive-level oral and written communication skills, including the ability to hold direct, accountable conversations across all organizational levels. </li> </ul> <p><strong>Desired Qualifications:</strong></p> <ul> <li>Prior ISSO, ISSM, ISSE, or SCA experience in an IC environment; experience overseeing ISSMs of Record with DCSA, DIA, NSA, NRO, or CIA sponsors. </li> <li>Experience au