Evelyn Ahenkan Email & Phone Number

Dayton, Oh, Us

-Consistently obtain status updates with customers to ensure alignment with project scope scheduling, and documentation.-Support monitoring of systems, servers, infrastructure, and software, to include firewalls, proxy servers, and intrusion detection systems.-Assess each client’s system and identify security issues specific to them. Using the findings, prepare a business case outlining the strategies and architecture that should be used to prevent threats and address vulnerable… Show more -Consistently obtain status updates with customers to ensure alignment with project scope scheduling, and documentation.-Support monitoring of systems, servers, infrastructure, and software, to include firewalls, proxy servers, and intrusion detection systems.-Assess each client’s system and identify security issues specific to them. Using the findings, prepare a business case outlining the strategies and architecture that should be used to prevent threats and address vulnerable areas.-Describe the existing threat to their client, why there is a need to deploy architecture for the protection, and how the deployments will defend the business.-Track and report metrics and details surrounding changes, incidents, outages, and root cause analysis as they affect customer experience.-Support the management of client satisfaction at all phases of the client relationship. Deliver both technical and management debriefs, up to executive level. Show less

United States

• Develop Security Assessment Plan (SAP). Determine the initial controls to be assessed by reviewing the accepted System Security Plan (SSP). • Assessing the security controls that has been identified using NIST Special Publication 800-53A. • identify the appropriate assessment procedure for each security control and control enhancement, identify all planned assessment methods in a manner that ensures repeatability and verification of results by a third party to facilitate approval by… Show more • Develop Security Assessment Plan (SAP). Determine the initial controls to be assessed by reviewing the accepted System Security Plan (SSP). • Assessing the security controls that has been identified using NIST Special Publication 800-53A. • identify the appropriate assessment procedure for each security control and control enhancement, identify all planned assessment methods in a manner that ensures repeatability and verification of results by a third party to facilitate approval by staff and potential audit by external agencies.• Assess security controls, follow approval of the SAP, execute the plan in accordance with the methods and preliminary schedule of activities, conduct out-briefs/status calls with all interested parties and will conduct a formal out-brief at the conclusion of the assessment.• Develop Reports and POA&Ms, follow the conclusion of the security assessment, fully document the results of the assessment of each control and provide verifiable evidence of each finding. Show less

Dayton, Ohio, United States

-Provide support for a program, organization, system, or enclaves information assurance program; -Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies-Identify and complete applicable Defense Information Security Agency (DISA) Security Technical Implementation Guides (STIG) checklists.-Maintain operational security posture for an information system or program to ensure information systems security… Show more -Provide support for a program, organization, system, or enclaves information assurance program; -Provide support for proposing, coordinating, implementing, and enforcing information systems security policies, standards, and methodologies-Identify and complete applicable Defense Information Security Agency (DISA) Security Technical Implementation Guides (STIG) checklists.-Maintain operational security posture for an information system or program to ensure information systems security policies, standards, and procedures are established and followed-Assist with the management of security aspects of the information system and perform day-to-day security operations of the system; evaluate security solutions to ensure they meet security requirements for processing classified information-Perform vulnerability/risk assessment analysis to support certification and accreditation; provide configuration management (CM) for information system security software, hardware, and firmware; manage changes to system and assess the security impact of those changes; prepare and review documentation to include Systems Security Plans (SSPs), Risk Assessment Reports, Certification and Accreditation (C&A) packages Show less

United States

• Document observations for existing IT control processes and identified issues in assessment questionnaire during disaster recovery planning exercises• Conducts assessment of the security and privacy controls implemented by an information system officer to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing within the system boundary. • Perform vulnerability/risk assessment analyses to support A&A… Show more • Document observations for existing IT control processes and identified issues in assessment questionnaire during disaster recovery planning exercises• Conducts assessment of the security and privacy controls implemented by an information system officer to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing within the system boundary. • Perform vulnerability/risk assessment analyses to support A&A activities. • Develop solutions to security weaknesses in the Requirement Traceable Matrix (RTM) and SAR, while working on POA&M remediation and Corrective Action Plan (CAP).• Perform assessments on FedRAMP based on customer responsibility documentation and controls provided by the Cloud provider to assess.• Maintains and manages Security Authorization and Assessment packages that include System Security Plans (SSP), Contingency Plans (CP), POA&Ms, SAR, and other relevant security documentations for the system. Show less

United States

● Documenting and keeping track of risks and recommendations based on the vendor’s lack of control • Co-ordinating and performing vendor reviews -Follow Risk Management Framework• Studying the legislation of the government and advising the vendor or company on how to comply with these legislations. • Manage the third-party risk management program. • Identifying and measuring the risk associated with vendor security controls. • Work with cross-sectional teams, including… Show more ● Documenting and keeping track of risks and recommendations based on the vendor’s lack of control • Co-ordinating and performing vendor reviews -Follow Risk Management Framework• Studying the legislation of the government and advising the vendor or company on how to comply with these legislations. • Manage the third-party risk management program. • Identifying and measuring the risk associated with vendor security controls. • Work with cross-sectional teams, including IT, human resources, contracts, and security to address potential compliance issues and achieve data privacy program initiatives and provide as-needed support to other programs within Ethics & Compliance. • Ensures compliance with and provide input to security policies, standards, and procedures. Conducts all tasks in accordance with the requirement to comply with security controls. • Coming up with ideas and presenting them via reports and presentations and making suggestions or recommendations for improvements and enhancements based on research or findings. • Track, monitor and report on vendor compliance with information security standards. • Examining the areas that pose threats to the financial assets of the vendor or organization while also recommending solutions to minimize risks. • Support internal and external audits (including penetration tests and vulnerability management initiatives) – tracking audit measures, resolution tasks, and reviewing evidence of compliance. • Monitored and presented project risks to senior management through on-going processes of identifying, assessing, tracking developing, and executing risk mitigation strategies throughout project development.• Participated in various IT audits for clients within the financial, technology and information security industry, including development of risk and controls matrix and audit procedures, execution of testing and communication of findings to key stakeholders. Show less