Ade A. Email & Phone Number

• Assists in the development of assessment procedures. Creates Requirement Traceability Matrix for documentation of artifacts required to demonstrate control objectives. Reviews all policies for each control family.• Implements, manages, monitors and upgrades security measures for the protection of the organizations data, systems and networks.• Performs cybersecurity security assessments (FISMA/NIST 800, RMF, NIST, HIPAA), cybersecurity architectural review, cloud security assessments, vulnerability assessment, and penetration testing, and incident response to cyber-attacks.• Develops project schedules in coordination with all the relevant parties to conduct the full assessments or OSA (Ongoing assessments conducted quarterly) with relevant parties - pen test team, vulnerability scan team and the assessment team• Conducts kickoff meetings with all the stake holders, informs ISSO and ISO of the project, reviews the rules of engagement (ROE), addresses any relevant questions raised by the organization that hosts the system on how the assessment will be conducted.• Develops a security assessment plan (SAP) and the Evidence request list (ERL) of all the controls in scope during that quarter (OSA) or all the controls for a full ATO assessment. • Participates in client interviews to determine the Security posture of the System and to assist in the completion of the Security Assessment Plan using NIST SP 800-53A test required to maintain Company Authorization to Operate (ATO).• Documents all the findings, upon conclusion of assessment into security assessment report (SAR) Template.• Conducts out-brief meetings at the end of security control assessments and documents all the findings, upon conclusion of assessment into POA&M Template for injection in to CSAM.

• Reviewed System Security Plans (SSP) using NIST 800-18 as a guide, perform updates on Security Assessment Report (SAR), Plans of Action and Milestones (POAMs), Risk Assessments, Creates change control procedures, drafts, reviews etc.• Performed Step 5 assessment of the RMF using NIST 800-53a as guide and coordinates final decisions by initiating meetings with System Owner (SO).• Performed continuous monitoring activities by evaluating and reporting the status of information system security and directs corrective actions to eliminate or reduce identified risks.• Conducted security assessment through interviews, document reviews and examinations to determine the security posture of the information system and populate the Requirements Traceability Matrix (RTM) according to NIST SP 800-53A.• Supported the Information Assurance (IA) team to conduct risk assessments, documentation for Security Control Assessment, vulnerability testing and scanning using tools such as Nessus.• Prepared and reviewed Security Assessment Plan (SAP) to Chief Information Security Officer (CISO) for approval.• Collaborated with ISSO’s in remediating audit findings, security planning and reporting, and ensures mitigation of security vulnerabilities are completed in a timely manner.• Initiated compliance and vulnerability scan requests to identify and report weaknesses and potential security breaches.• Performed security control assessment (SCA) as part of Certification & Authorization (C&A) and continuously monitored controls post authorization to ensure constant compliance with the security requirement using NIST 800-137 as a guide.• Provided new hires with Cyber Security Awareness Training.• Developed Security Authorization packages such as System Security Plan (SSP), Plan of Action and Milestones (POA&M) – (for identified vulnerabilities and performed compliance monitoring).

Bowie, Maryland, United States

• Maintained organization IT infrastructures.• Installed and configured Microsoft Windows Operating Systems and Mac OS X.• Troubleshooting of Network, system, Active Directory and other access related issues.• Managed incidents and service requests using KACE software.• Pushed software updates to multiple users’ systems remotely.• Worked with management to update security manuals and develop training manuals for employees.• Ensured compliance with both internal and external information security safety standards.• Create/maintain email addresses and distribution lists in Microsoft exchange.• Developed system manuals, standard operating procedures (SOP) and user guides. • Assisted with QA testing of installed systems to ensure protection strategies are correctly implemented and working as intended.• Supported breadth of Microsoft Office 365 products and services.

Master Of Science - Ms, Management Information Systems, Information Assurance

Bsc, Microbiology, General