Akandu Ukoha Email & Phone Number

Silver Spring, Maryland, United States

Coordinated and documented an annual risk assessment as well as ad hoc project risk assessments.Reviewed risk assessment documentation for completeness and appropriate selections of controls.Coordinated and led efforts to execute an agency-wide security awareness program that is tailored to the needs of specific roles within the agency and is measurable and auditable.Designed and implemented a program to collect and report information security related performance metrics and key risk indicators.Worked collaboratively with all NOAA office lines to ensure that their practices are consistent withcorporate information security policies and standards.Identified compliance objectives and mapped program deliverables to the requirementsAssessed agency-wide compliance with NOAA's policies and standards and take action to remediate non-compliance.Recommended controls to reduce risks to levels that align with the organization's risk tolerance.Ensured that NOAA is properly evaluating security risks through the NIST framework that assesses the potential impact of threats to the agency’s information systems.Provided updates to senior management concerning any policy or documentation required for compliance to FISMA guidelines.

Baltimore, Maryland Area

Conducted meetings with the client to discuss client’s material weaknesses identified in an audit to gain an understanding and develop mitigation strategies for the findings.Conducted POA&M management by tracking and addressing weaknesses, as needed.Coordinated with POCs to request artifacts to close out POA&Ms.Met with system point of contacts to discuss and provide guidance on remediation strategies.Communicate complex technology and security concepts and methodologies to senior leadership to support development of enterprise security strategy implementation. Serve as a subject matter expert in governance and leadership by reviewing and developing effective structure for communicating, decision making and responding to security threats across an organizationUpdate security configurations by routinely reviewing vendor sites, bulletins, and notifications for security information. Provided technical advice on access control, security models, disaster recovery, business continuity planning, and security awareness training. Planned, implemented and monitored internal information technology security policies, application security, access control, and corporate data safeguardsDiscussed and developed security strategies with CIO after weekly review of network vulnerability assessment results.Wrote and updated detailed guides on procedural implementation of security controls in the agency.Provided subject matter expert advice for security policy and privacy related questions.Managed responses to all IT and security and compliance related inquiries from 3rd parties.

Baltimore, Maryland Area

Initiated and established a Role Based Access Control (RBAC) method for finance divisions to define controls for managing access and reducing risk.Managing role certification campaigns to confirm access controls and ownership.Coordinate meetings with senior officers of Morgan Stanley to determine privileges and access requirements relating to their departments.Developed materials to educate staff on the benefit of Role Based Access Control policy for the firm.Trained junior analysts on the daily tasks associated with provisioning appropriate access.Processed user access requests, modifications, terminations.Communicating status across the firm charting progress against the Identity Access Management program roadmap.Assist Project/Audit Lead with Semi Annual Access Review process for financial divisions.Work with various business and IT application owners to define Role-based access templates for implementing RBAC for multiple applications.

Baltimore, Maryland Area

• Working diligently with stakeholders, business and technical leads to understand scope and align project deliverables to meet release deadlines• Involved in the conducting weekly stakeholder meetings to keep the abreast of project status, changes, progress, timelines and cost.• Involved in gathering business requirements, analysis, data modeling and project implementation schedules for several teams reporting to members of management in an Agile environment.• Participated in UAT project planning, software testing and integration for corporate business applications.• Responsible for organizing and participating in training sessions for end users after program or software execution.• Install, configure and maintain IPS/IDS, Firewall, Anti-Virus, Anti-Spam, Anti-Malware, SIEM, etc. for maximum internal network protection.• Research suspected or confirmed malware infection.• Perform firewall vulnerability assessments and penetration tests assessments and remediate issues that arise.• Helps to conduct internal and external security scans to identify vulnerabilities on the network or attached systems.• Helps to conduct the training of client staff to recognize, respond to, and report to IT department, any unauthorized or fraudulent attempts to obtain client information.• Investigates new information security technologies and makes recommendations on the best use of technology for a particular application.• Works with other Information Technology staff to standardize the access and security privileges provided on these systems to ensure that access given to users is appropriate, and is in the interest of the client.• Provides assistance and direction to other Information Technology staff on information security matters.

Baltimore, Maryland Area

• Data gathering and report building for information related to sales, operating procedures, performance metrics, internal and external business intelligence to make actionable recommendations.• Acted as a liaison with key functional partners within Business Unit to identify and acquire data required by the business to support decision making and influence operational improvements.• Co-ordinated with stakeholders and acted as a liaison between the business unit and IT during project cycles.• Assisted in the development and management project plans, identifying and managing stakeholders, and provides subject matter expertise to project teams.• Provide ad hoc support to include but not limited to business performance reporting, financial performance review and analysis, modeling, competitive research, executive level proposal/presentation preparation.