David Bryant Email & Phone Number

Fredericton, Nb, Ca

Fredericton, New Brunswick, Canada

• Manage Lastwall FedRAMP, FedRAMP+ and CMMC compliance program using GRC software platform.• Prepare and submit annual FedRAMP and FedRAMP+ authorization package documents (SSP, Attachments, POAM, SAP, SAR) to eMASS.• Review monthly compliance reports to ensure identified vulnerabilities are mitigated within mandated timeline.• Prepare and submit monthly Continuous Monitoring Reports to eMASS for review.• Develop and manage security policies, standards, and procedures documents.• Assist 3PAO during annual security assessment by gathering and presenting requested evidence.• Prepare and generate compliance status reports for stakeholders.• Work with diverse stakeholders at all levels of organization.

Frederitcton. N.B

Skillsoft is a trusted partner and leading global provider of high-quality, innovative, cloud-based learning and performance support resources. Enabling organizations to achieve competitive advantages through superior enterprise-wide knowledge and skills.My responsibilities:• Manage Skillsoft FedRAMP compliance program using approved GRC software.• Prepare annual FedRAMP authorization package documents (SSP, FIPS 199, SAP, SAR, POAM etc.)• Review monthly compliance reports to ensure identified vulnerabilities are mitigated within mandated timeline.• Prepare and submit monthly Continuous Monitoring Reports for FedRAMP compliance.• Manage STIG (O/S) and CIS (D.B) configuration management compliance audits.• Develop, document, and manage Cloud Operations security policies and procedures.• Assist 3PAO during annual security assessment by gathering and presenting requested evidence.• Work with Legal relating to GDPR compliance issues/matters.• Manage security training program to adhere to FedRAMP compliance.• Manage GRC tool• Prepare GRC reports• Manage RFP and customer questionnaires in relation to security controls and compliance.• Work with third-party vendors to ensure interconnection security agreements are in place.• Work with diverse stakeholders at all levels of organization.

Fredericton, Nb

Xplornet Communications is one of Canada’s leading broadband service providers. For over a decade, Xplornet has been providing innovative broadband solutions to rural customers at work, home and play across Canada. Today, Xplornet offers voice and data communication services through its unique wireless and satellite network that connects Canadians to what matters.My responsibilities:• Leader in the development and implementation of Xplornet information security program utilizing ISO 27001-2 framework. • Subject matter expert (SME) for organization in areas of security and risk.• Performed periodic security reviews to ensure organizational compliance with PIPEDA and PCI.• Leader in the development, maintenance and overall lifecycle of corporate security policy.• Mapped security requirements within security policies back to security controls.• Ensured key risks and issues are identified, addressed and resolved.• Worked with stakeholders to integrate security controls into workflow processes/procedures.• Recommended security controls and/or corrective actions for mitigating technical and organizational risk• Used a risk register as a tool to identify, assess, and manage risk.• Assisted IT Operations with management of technical security controls• Conducted quarterly internal security assessment and oversight for annual third party external audit• Developed and managed an organizational information security training and awareness program, consisting of training modules, banners, posters etc.

Salisbury Nc

Contracted to Ahold Delhaize who is one of the world’s largest food retail groups, a leader in supermarkets and e-commerce, and a company at the forefront of sustainable retailing.My responsibilities:• Used RSA enVision (SIEM) for centralized log management.• Used Cisco Security Manager (CSM 4.3) to manage network/retail firewalls• Worked with Cisco ASA 5500 series and IBM Proventia firewall technologies• Used ServiceNow ticketing system to open, track, and close incident and Change Management (CM) request

Master Of Business Administration (M.B.A.), It Risk Management, 3.45

Master Of Science (Msc), Computer And Information Systems Security/Information Assurance, 4.0

Colorado Tech is recognized by the National Security Agency and the Department of Homeland Security as a Center of Academic Excellence.

Bachelor Of Science (Bs), Computer Networking, 3.25