Information Security Risk Specialist, Senior Consultant
Orlando, Florida, United States
Navy Qualified Validatoro Served as a Navy Qualified Validator for the Naval Air Warfare Center Training Systems Division (NAWCTSD) combat training system program office.o Conducted RMF Validation and Risk Assessment (RA) activities for Operational Technology (OT) systems (Security Testing, System Risk, System Audits, Security Hardware and Software Testing, and support Checkpoints).o Performed Validation Security Assessment testing at the enterprise and system level, and assess and document risks in accordance with DoD and Navy policy and guidance.o Created and provided all RMF appropriate artifacts and documentation necessary to plan and execute a thorough test of systems, document the system risks and report on the identified risks.o Applied technical experience with STIGs, SCAP scans, Evaluate-STIG, and ACAS to determine security vulnerabilities.o Responsible for enhancing the overall quality of RMF packages for the purpose of receiving an Authorization to Operate (ATO) from the Authorizing Official (AO) or Authorizing Official Designated Representative (AODR).Information System Security Officero Served as an Information System Security Officer (ISSO) in providing continuous support by aiding the Department of the Navy in processing Authorization to Operate (ATO) and accreditation packages for naval airframe training systems. o Supported the development and sustainment of Information System (IS) accreditation throughout the Risk Management Framework (RMF) lifecycle phases. o Validated security controls and conduct DoD assessment procedures in accordance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53. o Performed complete assessment of Information Systems and Network security controls using Assured Compliance Assessment Solution (ACAS) and Vulnerability Remediation Asset Manager (VRAM). o Applied IS Categorization, selected Security Controls, and submitted required artifacts utilizing eMASS for ATO packages.