Dr. Abby Marrow, Dsc, Msia, Mba, Ms, Cgrc Ts Sci W/Poly - Fs Email & Phone Number

Patuxent River, Maryland, Us

Senior Information Assurance Security Manager/ Information System Security Manager (ISSM) responsible for coordination, oversight, execution and enhancement of consistent security practices for all information systems within the PMEO.Provides leadership and support for all security compliance initiatives, such as:* Leads annual plan to identify, document and update applicable security controls in the System Security Plan in accordance with NIST SP 800-53 rev 5, Security and Privacy Controls for Federal Information Systems and Organizations, and NIST SP 800-37, Risk Management Framework.* Ensures configuration control over Security Assessment and Authorization (SA&A) and Certification & Accreditation (C&A) packages.* Manages and coordinates both external Office of Inspector General (OIG) and internal Security Controls Assessment (SCA) audits, and creation and delivery of audit artifacts.* Coordinates with Security Engineers, IT Operations teams and customers to develop and maintain the Plan of Actions and Milestones (POA&M), Acceptance of Risk (AOR) and other required security documentation, processes, and procedures.* Conducts and documents security assessments to determine the effectives and compliance of planned and implemented security controls.* Performs systems security evaluations, audits, and server logging reviews to verify secure operations and recommends mitigations and corrective actions.* Organizes and facilitates contingency planning and incident response exercises.* Supports Incident Response activities to mitigate damage, determine impact, document activities, and implement corrective actions.

Washington, Dc, Us

Responsible for leading (including planning, executing and reporting) engagements of all types (e.g., local and System audits, system development life cycle and special reviews) and complexity levels. In role as a senior IS auditor, providing guidance and training, as required. Participates in departmental objectives and internal quality assurance (QA) initiatives, and represent the board on local and Federal Reserve System (System) SOX, FISMA, NIST, COSO and ITAF reviews.Coordinated FISMA / SOX it reviews and testing with business units and it department and liaised with external auditors to communicate status and address findings during SOX Audits. Administered continuous audits, evaluating the operating effectiveness of controls leading to increased assurance of controls and reduced risks. Performed risk assessment (based on RMF), general controls oversight and review to ensure compliance with SOX regulations and standards. Utilized risk assessment methodology to assist in establishing the annual audit plan competency.Defined & developed use cases & specifications, mapped processes & requirements, used COSO, RMF Evaluated current security processes, tools, and practices as a member of the information security team Reporting directly to the CISO. Prepared audit scopes, reported findings, presented recommendations and coordinated with various departments to create remediation plans for deficiencies found during audit.

Fort Belvoir, Va, Us

Served as Financial Management Analyst within the DLA J8 Information Operations Command, Performed a wide variety of FIAR and OMBA-123 governing policy analysis and decomposition of DoD financial systems. Developed internal controls and related test plans to support internal test work in preparation for a financial statement audit. Supported Assertion Process internal control ICOFRs / ICONOs/ ICOFS and substantive testing of business processes among teams financial statements. Planned and executed compliance assessments baselining systems, and using tools and data such as (DISA) Security Technical Information Guides (STIGs). Independently developed and manage the WBS, Administrative Policies, coordination of resources and project planning, analysis and delivery. Provided support in accomplishing the Phases and Key Tasks of the FIAR Methodology as outlined in the latest FIAR Guidance provided by OSD. Provided financial management expertise to DOD/ DLA to supports FIAR (Audit Readiness) efforts to meet the congressionally mandated requirements to achieve fully auditable financial statements. Maintained responsibility for audit readiness planning and execution and day-to-day operations including Documentation/testing of FISMA, COBIT and NIST internal controls over financial reporting, assessing the design and operating effectiveness of internal controls, preparation of assertion packages, audit preparation activities, remediation of systems and development of new policies. Managed (6) direct reports, decomposed project requirements via POAM/ WBS. Assisted with Identification of Deficiencies, Corrective Action Plans, POAMS, System Security Plans.Managed stakeholders engagement and client deliverables and perform analysis and design activities to develop audit ready specifications for testing, review and enhancements, data conversions, and systems customization to meet DOD FIAR Guidance and The Federal Information Security Management Act of 2002 (FISMA)

Fort Belvoir, Va, Us

Provided support in documenting and assessing compliance in achieving and maintaining an audit ready internal controls state for information systems identified in the FIAR assertion process. Assisted in the execution and reporting on the Phases and Key Tasks of the FIAR Methodology as outlined in the latest FIAR Guidance provided by OSD.Conducted analysis and evaluation to DLA in the performance of efficient and effective Discovery, Corrective Action, Evaluation, and Assertion. Phases identified in FIAR Guidance for each assessable unit. Provide data, analysis and support to the Subject Matter Expert to develop and sustain various assessable unit assertion packages compliant with OUSD(C) direction and the latest FIAR Guidance.Prepare, develop and submit Audit Readiness & Sustainment Strategy Integration Bi‐Weekly reports. Performed data analysis and reporting activities to develop audit ready specifications for testing, review and enhancements, data conversions and systems customization to meet DOD FIAR Guidance and The Federal Information Security Management Act of 2002 (FISMA).Served as program/project coordinator providing on-going support to senior management, policies, and procedure analysis and dissecting a broad range of new or modified guidance, policies, procedures, associated with goals and objectives, and mission audit and sustainment of DLA operations.Provided assistance and analysis on the interpretation of FIAR and OMB A-123 governing policy for each functional area of DLA operations. Research sensitive, complex or otherwise controversial issues, utilizing all resources available.Consistently prepared and conducted briefings for higher level management to explain the specific analysis of subject matter, as well as to provide recommendations and prepared corrective action plans for approval specific to the FIAR Guidance and DLA Audit Sustainment implementation.

Washington, Dc, Us

Work with the ATO- Finace Operations to perform a wide variety of analytical duties associated with all aspects of the Air Traffic Controller workforce, budget and payroll . This includes tracking of funds obligations, to ensure workforce compliance requirements and appropriation. •Provided financial/program analysis in support of Federal Aviation Administration (FAA) Comptroller Group, AJF and the Air Traffic Organization (ATO).•Provided on-going technical expertise to the FAA ATO to evaluate, track Comptroller movements, staffing levels, retirements, salaries, schedules, budget, funding, justifications, issues and performance on a monthly basis.•Responsible for maintaining and tracking FY10 and FY11 Regional Financial and Staffing Comparisons for all service areas (Eastern, Central, and Western). Primarily focusing on the negative balances.•Responsible for maintaining and tracking inactive / active population movements for all regions. Once reasons for active/inactivity are determined, actions are required for those funds, which may include de-obligating expiring funds using PR’s in the DELPHI system.•Performed data gathering information determination and dissemination, which includes technical support and assistance to the FAA in the conceptualization, analysis, are done to ascertain the movement; Movement report is disseminated to various ATO departments and reporting to congress, as appropriate.

IT Financial Consultant

Washington, Dc, Us

IT Information Intelligence Analyst is responsible for providing independent analytical and technical business support for major projects and initiatives. Analyzed massive and highly complex data sets, performing ad-hoc analysis and data manipulation. Wrote reports using IBM Cognos reporting system to extract data for analysis using filters based on the analysis. Worked on complex information model, logical relationships, and the data structures that support different teams.Supported and implemented KPIs daily reporting process. Establishes in-­‐house forecast metric of predicting daily, weekly and monthly call handling projections. Managed and mentored 100% 7 team reporting staff on internal and external controls on key performance measuresDeveloped, presented client project plans and assisted with documentation on technical implementation of Quality Assurance application. Analyzed, monitored and audited system compliance for team operations reports to include required internal and external daily, weekly, and monthly service and baseline QA reporting.

Washington, Dc, Us

Conducted internal quality assurance audits on the service providers reporting reviews.Request and coordinate status updates and reports as it pertains to project deliverables.Provide high-quality administrative support while successfully managing multiple deadline driven tasks.Complete work assignments in accordance with ERM’s format and quality standards.Serve as 100% program liaison between Program Sponsors, Constituent, Stakeholders, and Customers. Monitor assigned systems for data submission and processing

Doctor Of Science, Computer And Information Systems Security/Information Assurance

Master Of Science - Ms, Cybersecurity & Information Technology

Master Of Business Administration (M.B.A.), Business Administration And Management, General

Bachelor Of Applied Science - Basc, Management Information Systems, General

Master'S Degree, Information Technology |Information Assurance | Cyber Security