Bradford Brevard Email & Phone Number

Supervise a team of 5 cyber analysts in support of Assessment and Authorization (A&A) activities including Working with development teams to document the DSAID Database system for Authorization to Operate (ATO) in accordance with RMF standards. Working in eMASS to complete A&A tasks for clients in accordance with Risk Management Framework (RMF).

Manage a team of 6 that supports the DHA Cyber Authorization of Cerner’s Implementation of the Cerner Electronic Health records within the Veterans Administration. Specifically, my team supports the Authorization and Accreditation tasks including working with the Cerner delivery engineers to track and report on their ongoing vulnerabilities, and to manage the POA&M process. My team and I reviewed and QA every cyber-STIG checklist submitted within the enclave before it is sent to the VA for final approval.

Maintain and review information security documentation for SaaS analytical platform for VA Office of Connected Care (OCC) in accordance with FedRAMP guidelines, including but not limited to System Security Plans, Security Risk Assessments, Contingency Plans, Plan of Action and Milestones (POAM), Privacy Impact Assessments.• Assist with the implementation, modification, and improvement of Risk Management Framework (RMF) workflow and its component parts• Conduct IT controls risk assessment to identify system threats, vulnerabilities, and risk, and generate reports.• Develop and conducted Security Test and Evaluation according to NIST SP 800-53A.• Conducted a security assessment, control assessment to assess the adequacy of management, operational privacy, and technical security controls.• Develop Security assessment Report detailing the results of the security control assessment along with plan of action and milestones to the Approving Authorization Official (AO) to obtain the Authority to Operate (ATO)

Shares responsibility for leading a team to support a Medical Device Protection Program for the Department of Veterans Affairs. Supervises a team of 30 contract staff, managing, supporting and evaluating effective contract delivery and daily resource management activities. Supervises and prepares weekly, monthly and quarterly reports for internal management and VA executive team, as required.• Reviewed Medical Devices network and hardware designs for any potential security risk; recommended mitigation path to resolve the risk• Partners with the client to collaborate on strategic initiatives• Recruits and manages staff, monitors and approves timecards, and conducts annual performance reviews• Builds and maintains working relationships with team members, vendors, the client and other departments involved in the project• Liaises with the client and related partners on behalf of ASMR, as a knowledgeable resource and subject matter expert (SME) for data security matters • Determines and establishes priorities for the completion of assigned tasks, tracking team progress• Develops and maintains task management information to support project status reporting

Managed a team of cybersecurity professionals for the VA Service Operations (SO), Enterprise Security Operations (ESO), Specialized Device Security Division (SDSD). This division oversees the risk management of Medical Devices and Special Purpose Systems (SPS).• Designed, developed and implemented the Enterprise Risk Analysis (ERA) Tool, which enables Biomedical Engineers to assign risk in accordance with the Medical Device Control Overlay• Developed Medical Device Security Control Overlay Compliance Questionnaire for the ERA Assessment Tool and designed the workflow for SharePoint intake process for ERAs• Applied NIST SP 800-53 Security Control documentation and VA Handbook 6500 to map Security Controls to Risk Factors and mitigating controls for medical devices and SPS• Provided operational support to the program and developed presentations

Washington D.C. Metro Area

Managed a team of cybersecurity professionals in communicating and enforcing security policies, procedures and safeguards for VA systems and facilities, based upon NIST standards. Led efforts to analyze and advise on the risk and remediation of security issues. Initiated, coordinated and tracked the patching and remediation of security weaknesses as discovered, via POA&M.• Performed system security analyses to ensure systems met guidelines under the NIST and VA-6500 publications. Examined NIST 800-53 in comparison to security and privacy controls for Federal Information Systems• Managed artifacts in GRC Tool - RiskVision (Privacy Impact Assessment (PIA), Standard Operating Procedures (SOP), System Security Plan (SSP), Interconnection Security Agreement/Memorandum of Understanding (ISA/MOU), Incident Response Plan (IRP), Risk Assessment (RA), Disaster Recovery Plan (DRP), Information System Contingency Plan (ISCP), Configuration Management Plan (CMP), and POA&M)• Executed analysis within the RMF and Security Assessment Framework (SAF), to address the security concerns of information systems. Coordinated with Enterprise Project Management Office (EPMO) team to provide update on technical test requirements• Managed evaluations of evidence to determine whether security controls comply with organizational policies. Investigated system discrepancies, mitigated risk and failures, and collaborated with the client to resolve issues• Led meetings to discuss various implementation methods, providing stakeholders with daily and weekly reports

• Monitored and reported on remediation statuses of overdue vulnerabilities and support assignments • Established policy/ Service Level Agreement (SLA) enforced to require monitoring and patching• Assessed the patch management process and remediate process gaps• Implemented operational reporting improvements and evaluated automation opportunities for tagging vulnerabilities• Analyzes vulnerabilities found in VA network utilizing Nessus, IEM and SCCM reports to identify trends and identify plugins that will be remediation focus. • Focuses on cybersecurity to improve the security posture of the network and eliminate threats that exist in the VA and protect against potential exploits • Creates monthly compliance reports for systems that fall below the established compliance thresholds and assist with remediation efforts as needed.• Reviews VA processes and advises on areas of improvement that will aid in improving the security posture of the organization.

Led efforts to monitor and prevent phishing attacks against Cyveillance clients, including contacting providers of malicious accounts and pursuing their removal from the Internet.• Tracked the progress of unresolved cases to ensure successfully completed removal, or to identify the need for escalation to appropriate authorities or organizations, per the established guidelines and procedures• Identified and communicated improvements for case processing, client deliverables and departmental productivity

Washington D.C. Metro Area

• Coordinated shipment and staging of IT equipment/hardware in Country Offices• Managed and updated all activities using the official project management tools, incident (trouble-ticket) management system, and inventory management systems• Coordinated and collected of milestone/data from multiple departmental leads to produce periodic management reports• Maintained client Asset Management repository in Remedy, by creating configuration items for the Configuration Management Database system

Reston, Virginia

• Provided support on personal computer (PC) and peripheral installation and troubleshooting on Macs, Linux, Windows machines, Android, and IOS mobile devices; problem/incident recording, and problem resolution/escalation• Supported troubleshooting of basic network issues (IP configuration, bandwidth, DNS and command line tools, Ping, etc.). Interacted with external users to obtain and convey concise solution information in a professional manner by phone, email, and in person• Delivered accurate and timely logging of issues and resolutions in the ticketing system

Herndon, Va

• Provided business domain solution, process, strategy, business case, and change consulting to external clients as contract employee at HP• Developed business solutions for external clients using the ITIL processes of Incident, Problem, Change, Release, and Configuration management; consult with client to formulate business solutions in the use of HP Service Manager. Utilized workflow tools to integrate with external clients’ enterprise management tools

Auburn Hills, Mi

• Project Manager for Ricoh to Canon printer conversion; managed software and hardware assets using Altiris and HP service center• Evaluated vulnerability scans utilizing Qualys network scanning tool, notify security administrators of vulnerabilities and planned course of remediation due to risk to overall network security• Provided Deskside Support Management in governance oversight role to outsourced Deskside support vendor• Reviewed Tickets of Tier 1 and Tier 2 desktop support tickets, and took appropriate action to ensure they met the client SLA

Washington D.C. Metro Area

Managed all areas of lifecycle management program for 60,000 seat client by developing and implementing a global project plan for refreshing hardware assets, including laptops, desktops, and printers in 67 countries.• Regularly captured, tracked progress of, and generated plans for 67 countries against budget. Comprehensive system strengthened overall asset management knowledge, kept client informed, and quickly identified critical gaps in the global system. Validated asset information to ensure quality of data.• Globally managed Non-Standard Service Requests in conjunction with refresh project using HP best practices.

Washington D.C. Metro Area

Led major PC migration effort mandated by the federal government and affecting thousands of users. Implemented and maintained End User Computer/Workplace Services for 4,200 seat environment. Managed assets of >1,000 pieces of IT hardware in depot. Served as single contact point for service delivery, improvements, and new business. During hardware refresh program, worked with vendor to properly dispose of old assets and update database accordingly. Regularly met with Chief Information Officer (CIO), providing dashboard of hardware/software trends and status reports on projects and service level agreements (SLAs). Ensured internal IT support providers and external suppliers understood SLA expectations. Reported on SLA metrics against benchmarks to CIO in a monthly report. • Managed major technical project to upgrade 4,000 users to compliancy as part of U.S. Government mandated Federal Information Processing Standard (FIPS). As a result, HP’s Mobile Information Protection was successfully launched onto user systems, allowing standardized codes for critical network of government users.

Washington D.C. Metro Area

Guided eight team members tasked with multiple technical duties, including implementing patching, programming, and Tier 2 and 3 support programs. Implemented Network Interface Card (NIC) speed upgrades for 800 global users. Served as HP’s liaison in meetings with senior World Bank leadership.• Led project that included identifying 600 HP digital senders with goal of repairing malfunctioning senders. Through development of a high-visibility, technical plan, site technical analysts were able to repair equipment critical to World Bank’s daily operations.

Washington D.C. Metro Area

Oversaw and resolved customer issues, from critical business stoppages to hardware failures and performance issues. Regularly diagnosed software or operating system failures. Served as Team Lead for Enforcement Department of NASD/FINRA, which included managing in-house projects separate from HP.• Acted as Technical Project Lead for multi-million dollar Windows XP migration project. Upgraded 3,800+ computer systems from Windows 2000 to Windows XP OS. Set up operating systems, restoration data, network drives, and printers. Successful and speedy installation allowed client to maintain mission critical operations as the largest securities regulator in the U.S.• Integrated 500+ former NYSE employees to NASD desktop environment. Created login names, exchange server accounts for email, share-drives, and portal for former NYSE employees. Implemented predetermined preventive measures and created procedures to allow for efficient use of resources. Guided team to flawlessly execute integration plan.

Washington D.C. Metro Area

Ensured hardware/software applications and network components were operational and that users were provided with appropriate resources and acceptable response time.• Successfully executed a training program for 150 sales personnel on processes required to access data, software applications on hardware platform, and network resources. Efforts allowed client-facing XEROX sales personnel to continue to seamlessly serve their customers and protect valuable company business.• Performed desktop support for Windows XP as well as MS Office 97 – 2003 and all supporting applications for main office and two remote sites.

Master’S Degree, Master Of Science In Cybersecurity Technology

Cyber Security, Bachelor Of Science In Cybersecurity