Conducted user access rights reviews for critical systems periodically.Reviewed system logs to identify trends, investigate abnormalities, and report exceptions to the Information Security Program.Worked closely with the IT Department to ensure various safeguards were effective.Assisted in performing risk assessments of information assets and systems.Supported the enhancement of data leakage programs to protect customer and confidential information.Facilitated and tracked annual user access rights reviews performed by department managers.Documented and tracked Information Security incidents.

Maintained operational security posture for systems through tailored Risk Management Framework (RMF).Completed Security Authorization packages, including system security plans (SSPs) and security assessment reports (SARs).Evaluated information systems for compliance with RMF artifacts required for FISMA compliance and controls.Prepared and reviewed system documentation, including incident response plans and contingency plans.Collaborated with system owners to draft and implement POA&Ms.

Conduct thorough cybersecurity audits for clients across various industries to assess security controls, policies, and procedures.Analyze systems, networks, and applications to identify vulnerabilities, weaknesses, and potential risks.Evaluate compliance with industry standards, regulatory requirements (such as GDPR, HIPAA, PCI DSS), and organizational policies.Prepare detailed audit reports outlining findings, recommendations, and remediation strategies to address identified issues.Collaborate with stakeholders to develop and implement action plans to enhance cybersecurity posture and mitigate risks.Provide guidance and support to clients on cybersecurity best practices, risk management, and compliance frameworks.