Dwayne King Email & Phone Number

Washington, Dc, Us

District Of Columbia, United States

IT/CyberSecurity Program Manager. Responsible for multiple cybersecurity and enterprise IT initiatives to include [but not limited to] Zero Trust Architecture, Cloud Security, Continuous Diagnostic and Mitigation (CDM), Enterprise Configuration Management, Identity/Credential and Access Management (ICAM), software assessment and approval, IT policy and procedures.

Washington, Dc

As the Information System Security Officer (ISSO), I was responsible for determining security requirements by interpreting Federal Information Security Management (FISMA), Office of Management and Budget (OMB), and National Institute of Standards and Technology (NIST) legal and regulatory guidance for all Learning Management Systems under the GoLearn Program. I advised the federal Program Manager on federal and OPM IT Security policy and procedures and ensuring compliance of 4 (four) Major Applications and 46 Minor Applications utilized by external federal agency clients. All systems were contractor operated and housed in commercial data centers. Performed Certification and Accreditation activities and site assessments of all vendor locations leading to successful granting of Authorization to Operate (ATO) for all systems. I was responsible for developing and maintaining Privacy Impact Assessments (PIA) in accordance with privacy reporting requirements. Developed plan for tracking the completion of security related mandates and enhancements for remediation of audit findings and security related issues. Performed Security controls Testing and Evaluation (ST&E) using NIST 800-53A; reviewed vulnerability scan reports, performed self-assessments, and developed Information Security Policies and Procedures for the GoLearn program. Managed the Change Control Board (CCB), coordination of Contingency Plan/Disaster Recovery Testing, and Background Investigations of contractors. Provided weekly reports to the Program Director and advised on information security policy trends and impact on the program. Provided responses to FISMA audit findings and steered corrective actions. Drafted various reports on status and security posture of the programs information systems to satisfy Office of Management and Budget (OMB) reporting requirements

Falls Church, Virginia, United States

Served as Program Manager of the IT Security Operations office responsible for all IT security functions within DOJ / Office of Justice Programs / OCIO. Supervised group of comprised of Information System Security officers, security engineers and analyst. Interfaced with federal IT Security Director weekly to plan and coordinate directives, and report on the IT security posture for the programs twenty eight (28) systems and infrastructure. Responsible for the assignment of work and tracking task for risk management, security controls assessment, certification and accreditation, firewall management, vulnerability and threat analysis for information systems. Met with the auditing team on a monthly basis to discuss Plan of Actions and Milestones (POAM) status. Performed security control assessments of LAN/WAN, Privacy Threshold Analysis, Privacy Impact Assessment, Contingency Plan/Disaster Recovery and COOP testing. Drafted Residual Risk Reports. Assisted in development of security metrics i.e. Vulnerability Assessment, Security Awareness and IT Professional Training, Incident Response Training, and other reports for submission to senior government management. Reviewed/recommended security design changes with engineering staff during SDLC and configuration management. Performed vulnerability scans using FOUNDSTONE and AppDetective. Familiar with NESSUS and Security Expressions. Ensured maintenance of all certification and accreditation packages using Trusted Agent FISMA (TAF).

District Of Columbia, United States

Assisted the federal Director of National Security Systems and COMSEC in governance and oversight of the classified information systems and communications security program. Attended management staff meetings with the CIO to discuss status of Classified System Certification and Accreditation packages and policy development. Served as a liaison between DHS headquarters and sub-agencies on classified information security policy and governance matters. Reviewed and approved certification and accreditation packages of classified systems for multiple sub-agencies. Held monthly meetings with department heads of DHS sub-agencies to advise them on DHS IT Security requirements and policy. Developed certification and accreditation package for the National Infrastructure Control Center IT program. Performed information security audits of classified and unclassified systems, provided training on IT security requirements and the Certification and Accreditation process for unclassified and classified systems in accordance with DITSCAP, DCID 6/3, DHS 4300A/B, and other government policies. Drafted several updates to DHS information security guidelines and policies. Prepared IT related training plans, made recommendations on secure configurations of IT security components to meet security targets of systems such as guards, firewalls, routers, servers etc. Presented weekly briefings to the Chief Information Officer and departments heads on status of the IT security program and projects

Alexandria, Virginia, United States

Served as Information System Security Officer for new Department of State Security Management System. Responsible for SSAA (System Security Authorization Agreement) and Program Management Plan. Configured network topology and diagrams for sites. Ensured proper hardening (security) of systems in accordance with Department of Defense (DOD) standards. Conducted site surveys of U.S. Embassies worldwide to assess physical security needs. Trained the certification team, system users and administrators in the lab environment and on site. Produced technical documentation to include hardware and software installation procedures, instructor and student training guides, and application guidelines. Evaluated and tested security hardware including closed circuit television, intrusion detection sensors and monitoring equipment, access control systems and related components.

Patuxent River, Maryland, United States

Performed certification of U.S. Navy computer-based radar system in accordance with DOD policies. Traveled to naval fleet sites/ships worldwide to perform Combat System Readiness Reports, provide technical assistance, and instruction to on-site personnel. Held training workshops for visiting naval personnel. Supervised and assigned work to lab area consisting of technicians and production operators/assemblers. Developed the Certification and Accreditation template, implemented security policies and procedures, work instructions, and standard operating procedures

Various

Developed security policies on storage and handling of equipment according to DOD standards. Provided maintenance of shipboard radar and communication systems, and electronic/ digital testing equipment for external customers. Supervised equal and junior ranking personnel in completion of duties.