Information Assurance Analyst Jobs
Information Assurance Analyst jobs are open across federal contracting, defense, healthcare, and financial services, from entry-level to senior and lead positions, with specializations in risk management, compliance frameworks, and security controls assessment. See the openings below and apply to the ones that match your experience.
Find JobsOverview
Showing 5 of 78+ Information Assurance Analyst jobs
About Peraton
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
About The Role
Position Overview
The Contractor Lead will provide governance, risk, and compliance (GRC) oversight across enterprise cybersecurity programs, with a primary focus on dashboarding, RMF reporting, assessment quality, and ensuring accurate data flows from cyber compliance tools. The role requires a seasoned professional capable of leading compliance operations, synthesizing complex security information for senior leadership, and coordinating with technical teams across multiple organizational units including geographically dispersed plants and laboratories to support enterprise-wide cybersecurity outcomes.
Drawing on experience in risk assessment, vulnerability scanning, compliance auditing, COMSEC operations, and secure communications management, the Contractor Lead will ensure that cybersecurity posture is accurately measured, effectively communicated, and continuously improved. The position will interface with federal division directors, cybersecurity teams, and mission stakeholders to maintain high standards of data integrity, reporting quality, and regulatory alignment.
Key Responsibilities
- Lead development and maintenance of enterprise GRC dashboards to provide meaningful, accurate visualization of compliance posture, vulnerabilities, risks, and RMF control status.
- Translate complex technical information into executive-level summaries and visual reports, leveraging experience communicating COMSEC and cybersecurity data to leadership.
- Ensure dashboards reflect real-time, authoritative data sources by validating integrity and relevance of feeds from vulnerability scanning tools, compliance repositories, and RMF systems.
- Oversee reporting across all steps of the Risk Management Framework, ensuring visibility into control inheritance, implementation status, and authorization milestones.
- Support structured reporting cycles using background in RMF-aligned risk assessments, compliance audits, and mitigation planning.
- Ensure cyber compliance tools provide accurate and relevant data for enterprise reporting; validate and troubleshoot data flows as needed.
- Apply experience managing inventories, access control, encryption devices, and audit logs to improve data quality from compliance tools.
- Oversee the quality of assessment and authorization (A&A) activities by developing standardized review procedures and ensuring documentation accuracy.
- Guide teams in interpreting control requirements, developing remediation plans, and validating evidence to support authorization decisions.
- Collaborate across departments, national laboratories, and plant sites to align compliance workflows and reporting expectations.
- Build productive relationships with senior leadership, technical staff, contractors, and compliance stakeholders to synchronize cybersecurity efforts.
- Mentor junior personnel and support process improvement initiatives that enhance the maturity of the GRC and RMF programs.
Qualifications
Required Qualifications:
- 10+ years of experience in cybersecurity governance, compliance, RMF execution, or related fields.
- Experience developing dashboards, compliance visualizations, or executive reporting products.
- Strong familiarity with RMF, GRC methodologies, vulnerability management tools, and compliance tracking systems.
- Demonstrated experience communicating cybersecurity requirements to leadership, peers, and subordinate personnel.
- Active TS clearance with SCI suitability and the ability to obtain Q.
- Ability to work collaboratively across geographically distributed sites and diverse mission environments.
Preferred Qualifications:
- Experience supporting DOE, DOE-IN, NNSA, or other high-security federal mission environments.
- Bachelor’s degree in cybersecurity, information assurance, or related discipline; advanced degree preferred.
- Experience in COMSEC management, access control, and configuration of encryption devices.
- Familiarity with contractor oversight, and performance monitoring.
- Experience conducting audits, vulnerability assessments, and compliance reviews.
- Experience improving cybersecurity programs through structured reporting and process standardization.
- Active DOE Q clearance and SCI.
Details
Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
About Peraton
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we’re keeping people around the world safe and secure.
About The Role
Position Overview
The Contractor Lead will provide governance, risk, and compliance (GRC) oversight across enterprise cybersecurity programs, with a primary focus on dashboarding, RMF reporting, assessment quality, and ensuring accurate data flows from cyber compliance tools. The role requires a seasoned professional capable of leading compliance operations, synthesizing complex security information for senior leadership, and coordinating with technical teams across multiple organizational units including geographically dispersed plants and laboratories to support enterprise-wide cybersecurity outcomes.
Drawing on experience in risk assessment, vulnerability scanning, compliance auditing, COMSEC operations, and secure communications management, the Contractor Lead will ensure that cybersecurity posture is accurately measured, effectively communicated, and continuously improved. The position will interface with federal division directors, cybersecurity teams, and mission stakeholders to maintain high standards of data integrity, reporting quality, and regulatory alignment.
Key Responsibilities
- Lead development and maintenance of enterprise GRC dashboards to provide meaningful, accurate visualization of compliance posture, vulnerabilities, risks, and RMF control status.
- Translate complex technical information into executive-level summaries and visual reports, leveraging experience communicating COMSEC and cybersecurity data to leadership.
- Ensure dashboards reflect real-time, authoritative data sources by validating integrity and relevance of feeds from vulnerability scanning tools, compliance repositories, and RMF systems.
- Oversee reporting across all steps of the Risk Management Framework, ensuring visibility into control inheritance, implementation status, and authorization milestones.
- Support structured reporting cycles using background in RMF-aligned risk assessments, compliance audits, and mitigation planning.
- Ensure cyber compliance tools provide accurate and relevant data for enterprise reporting; validate and troubleshoot data flows as needed.
- Apply experience managing inventories, access control, encryption devices, and audit logs to improve data quality from compliance tools.
- Oversee the quality of assessment and authorization (A&A) activities by developing standardized review procedures and ensuring documentation accuracy.
- Guide teams in interpreting control requirements, developing remediation plans, and validating evidence to support authorization decisions.
- Collaborate across departments, national laboratories, and plant sites to align compliance workflows and reporting expectations.
- Build productive relationships with senior leadership, technical staff, contractors, and compliance stakeholders to synchronize cybersecurity efforts.
- Mentor junior personnel and support process improvement initiatives that enhance the maturity of the GRC and RMF programs.
Qualifications
Required Qualifications:
- 10+ years of experience in cybersecurity governance, compliance, RMF execution, or related fields.
- Experience developing dashboards, compliance visualizations, or executive reporting products.
- Strong familiarity with RMF, GRC methodologies, vulnerability management tools, and compliance tracking systems.
- Demonstrated experience communicating cybersecurity requirements to leadership, peers, and subordinate personnel.
- Active TS clearance with SCI suitability and the ability to obtain Q.
- Ability to work collaboratively across geographically distributed sites and diverse mission environments.
Preferred Qualifications:
- Experience supporting DOE, DOE-IN, NNSA, or other high-security federal mission environments.
- Bachelor’s degree in cybersecurity, information assurance, or related discipline; advanced degree preferred.
- Experience in COMSEC management, access control, and configuration of encryption devices.
- Familiarity with contractor oversight, and performance monitoring.
- Experience conducting audits, vulnerability assessments, and compliance reviews.
- Experience improving cybersecurity programs through structured reporting and process standardization.
- Active DOE Q clearance and SCI.
Details
Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
Information Assurance Analyst Jobs by Experience Level
See All 78 Information Assurance Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsInformation Assurance Analyst Job Market
Who's Hiring
Top Industries Hiring
- Education
What Employers Look For
The qualifications that appear most often in information assurance analyst jobs.
- Active DoD Secret or Top Secret security clearance
- Experience with NIST 800-53 controls and the Risk Management Framework
- Proficiency with security assessment and authorization documentation including SSPs and SARs
- Certifications such as CISSP, CAP, CompTIA Security+, or CISM
- Bachelor's degree in cybersecurity, information technology, or a related field
- Familiarity with FISMA compliance requirements and continuous monitoring programs
Tips for Your Information Assurance Analyst Job Search
Align certifications to the posting requirements
Many information assurance analyst postings require specific certifications like CISSP, CAP, or Security+ rather than treating them as a bonus. Cross-check each listing against your active credentials and prioritize roles where your certifications match the stated requirements exactly.
Tailor your resume to the right framework
Hiring managers in this field scan for the specific frameworks you have worked with, whether that is RMF, NIST 800-53, FISMA, or CMMC. Name the frameworks in your work history where you applied them, not just in a skills list at the top.
Apply early to roles that fit
Migrate Mate lists information assurance analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Filter by clearance level before applying
Many information assurance analyst roles require an active Secret or Top Secret clearance, and applying without one to a clearance-required position wastes your time. Read the security clearance requirement carefully and focus your applications where your current clearance level is a match.
Prepare a scenario answer for each control family
Interviewers frequently ask you to walk through how you have implemented or assessed controls in a specific NIST family, such as access control or audit and accountability. Prepare a concrete example for at least three control families before your interview so you can answer without hesitation.
Negotiate using your clearance as leverage
An active clearance with a recent investigation date shortens the employer's onboarding timeline significantly, which has real cost value to them. When negotiating compensation, name your clearance status and investigation date as a factor that reduces their time-to-productivity.
Information Assurance Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most information assurance analysts?
The most active employers for information assurance analysts right now are General Dynamics Mission Systems, Leidos, and MANTECH, and the most openings are in Maryland, Virginia, and District of Columbia, based on current listings on Migrate Mate as of November 2026. Federal contractors and defense agencies consistently drive the highest volume of openings in this role.
How many information assurance analyst jobs are remote?
About 63% of information assurance analyst openings are fully remote or hybrid as of November 2026, though clearance requirements and the need to access classified systems on-site limit remote options more than in other cybersecurity roles. Compliance-focused sub-areas such as policy writing, documentation review, and audit preparation tend to have the highest share of remote-eligible positions.
How do you become an information assurance analyst?
Start by earning a bachelor's degree in cybersecurity, computer science, or information technology, then pursue a foundational certification like CompTIA Security+ to establish your credentials. Gain hands-on experience through an entry-level IT or security operations role, then work toward certifications tied to governance frameworks such as CAP or CISSP. Applying for positions at federal contractors is a common path into the field because those employers often sponsor clearance investigations for candidates who meet the technical baseline.
Can you get an information assurance analyst job with little experience?
Entry-level information assurance analyst roles do exist, particularly at federal contractors who need staff to support authorization documentation and control assessments under supervision. Focus on earning Security+ and completing coursework or labs that demonstrate familiarity with RMF process steps. Many entry-level postings will accept candidates who can show they understand the authorization to operate process, even without years of direct experience in the role.
What does the information assurance analyst interview process look like?
Most information assurance analyst interviews begin with a recruiter screen focused on your clearance status and certification history, followed by a technical interview where a hiring manager or senior analyst walks through your experience with specific control families and authorization documentation. Some employers include a scenario-based exercise asking you to identify gaps in a sample system security plan. Final rounds often involve a conversation with a program manager or government customer representative, particularly at federal contracting firms.
Where can I find and apply to information assurance analyst jobs?
You can find and apply to information assurance analyst jobs on Migrate Mate, which lists current openings from across the United States. Search the listings to find roles that fit your clearance level, certifications, and experience, then apply directly to each listing that matches.
See All 78 Information Assurance Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs