Alison M. Cantrell, Cissp Email & Phone Number

Glen Arm, Md, Us

Maryland, United States

Baltimore, Maryland, United States

As Information Systems Security Officer (SSO) at Index Analytics, I managed secure cloud infrastructure for high-profile clients, including CMS and FDA, across AWS, Azure, and Microsoft 365 environments. I led critical endpoint protection initiatives and conducted both internal and external audits to ensure robust cybersecurity measures were in place. I performed comprehensive risk analysis and remediation, and delivered security and compliance training to employees, enhancing organizational readiness. I developed contingency and business continuity plans to safeguard operations and supported project teams by preparing documentation for security compliance assessments. Additionally, I collaborated directly with clients to monitor remediation progress and provided expert security guidance, ensuring continuous alignment with industry standards and best practices.

Bethesda, Maryland, United States

As Senior Manager of Global Information Security at Marriott International, I spearheaded the global rollout of vulnerability scanning across company networks, leveraging agent-based and credentialed methods to enhance security coverage. I provided critical expertise to optimize vulnerability management processes and drive successful remediation programs, resulting in a stronger overall security posture. I developed mitigation strategies for high-impact vulnerabilities in vendor software and hardware, and generated comprehensive metrics reports to track non-compliant assets and remediation efforts. Additionally, I led infrastructure vulnerability scans, oversaw product evaluations for security services, and ensured the operational readiness of critical systems. I also guided PCI compliance efforts, providing audit evidence and risk remediation strategies. My leadership directly contributed to Marriott’s enhanced global cybersecurity framework and adherence to regulatory standards.

Towson, Maryland

As Information Security Manager (ISSO) at Sheppard Pratt Health System, I established and led the Information Security Department for the largest behavioral health hospital in the U.S., building a comprehensive security program from the ground up. I developed and implemented a full-scale Information Security program using the HITRUST framework, creating detailed roadmaps and budget forecasts to support long-term security initiatives. I successfully deployed an enterprise-wide Endpoint Detection & Response (EDR) and Security Information and Event Management (SIEM) solution, enhancing the hospital's threat detection and response capabilities. I conducted the organization's first HIPAA Risk Assessment, established critical policies including an incident response plan, and presented security metrics to the governance committee. Additionally, I led a hospital-wide security awareness program, improving overall organizational understanding of cybersecurity risks and compliance requirements.

Towson, Maryland

As Senior Analyst of Information Security at General Dynamics Information Technology (GDIT), I managed a comprehensive health security program for 140+ customers, ensuring compliance with HITRUST, HIPAA, NIST, and CMS ARS standards. I mitigated over 160 risks, securing CMS Authority to Operate (ATO) and maintaining contract ownership. With deep expertise in Tenable and vulnerability management, I served as a Subject-Matter Expert (SME) in security engineering and tool deployments. I revamped the Risk Management program, leading internal and external audits and providing audit support to streamline evidence collection and resolve findings. Additionally, I overhauled vulnerability and configuration scanning processes, significantly enhancing security operations. My work spanned across program management, risk management, and auditing, ensuring regulatory compliance and bolstering healthcare security.

Towson, Maryland

Woodlawn, Md

Woodlawn, Md

AdvanceMed was a subsidiary of CSC (now DXC) which was sold to NCI.

Edgewood Proving Ground, Maryland

Secret Clearance

Edgewood Proving Ground, Maryland

Aberdeen Proving Ground, Maryland

Bachelor Of Science - Bs, Information Technology

Associate Of Science - As, Registered Nursing/Registered Nurse

High School Diploma, College/University Preparatory And Advanced High School/Secondary Diploma Program