Cyber Analyst And Paralegal
CurrentKnowledge of FISMA, NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment), SP 800-53 (Security and Privacy Controls for Federal Information Systems and Organizations), FedRamp, FIPS 140-2 and 199, NIST Risk Management Framework (RMF), CIS Benchmarks, DoD Directive 8570, ISO 27001 Series of Standards, and SANS Critical Security Controls.Cyber Analyst and Paralegal, Universal Service Administrative Company (USAC)August 2007 – Present• Conducts Nessus vulnerability scans, coordinates remediation efforts and prepares reports.• Monitors network events and logs using McAfee Enterprise Security Manager (SIEM).• Prepares and updates privacy threshold analyses, privacy inventory analyses, system security plans, and plans of action and milestones (POA&Ms).• Participates in system software and workflow development and user acceptance testing (UAT).• Directs data governance initiatives as a member of the data steward council.• Drafts and updates polices and procedures, including bankruptcy, PII, BYOD, and incident response.• Drafts and updates business continuity (COOP) and disaster recovery plans (DRP).• Developed plan for, and implemented transition to role-based access controls.• System Administrator responsible for maintaining all case information, and coordinating patches and system upgrades to Casetrack bankruptcy database.• Administrator and production coordinator for Concordance e-Discovery database. • Power user, content developer and workflow designer for Sharepoint sites.• Prepare proofs-of-claim, pleadings, stipulations and agreements in bankruptcy cases.• Drafts, proof-reads and cite-checks USAC administrative decisions.• Drafts bankruptcy and litigation reports for USAC Office of General Counsel, Board of Directors, and the Federal Communications Commission.• Provides guidance on program compliance and enforcement strategies.
