Festus A. A. Email & Phone Number

Fairfax, Va, Us

Washington, District Of Columbia, Us

Iron Vine Security (IVS) has been acquired by ASGN Inc. (parent company of ECS), effective 01/01/2023.

Morristown, New Jersey, Us

• Review System Security Plans using NIST 800-18 as a guide, perform updates on Security Assessment Report (SAR), Plans of Action and Milestones (POAMs), Risk Assessments, Create change control procedures, drafts, reviews etc.• Conduct FedRAMP Readiness Assessments and review ATO Packages for FedRAMP Cloud environments.• Perform initial assessment review and continuous monitoring of assigned systems and make recommendation based on vulnerability; high, moderate, or low.• Develop solutions to security weaknesses in the Requirement Traceable Matrix (RTM) and SAR, while working on POA&M remediation.• Perform evaluation of policies, procedures, security scan results, and system settings in order to address controls that were deemed insufficient during Certification and Accreditation (C&A), RMF, and continuous monitoring step.• Perform Step 5 assessment of the RMF using NIST 800-53a as guide and coordinate final decisions by initiating meetings with System Owner (SO).• Ensure that the Information Systems Security department's policies, procedures, and practices as well as other systems user groups are compliant with FISMA, NIST, FedRamp and general agency standards.• General Review of documentation; System Security Plan NIST 800-18 as a guide, Authorization to Operate (ATO), Security Assessment Report (SAR), FIPS 199 System Categorization using NIST 800-60 Vol1/Vol2 based on confidentiality, integrity and availability (CIA), policy and procedures, e-authentication, Privacy Threshold Analysis, Privacy Impact Analysis (PIA), Contingency Planning (CP) and interconnection security agreement as per NIST 800-47, certification and accreditation (C&A) packages and system standard operating procedures.

New York, Us

• Served as the Subject Matter Expertise (SME) on issues surrounding Information Security and Information Technology compliance standards. Review and update security documentation governed by NIST 800 series and organizational policies. • Developed the Standard Operating Procedures (SOPs) to create the A&A process, coordinate, track and remediate security weaknesses as discovered in the Plan of Actions and Milestones (POA&M) tracking tool. • Developed System Assessment and Authorization (SA&A) packages for compliance with NIST guidance, including System Security Plans, System Categorization documents POA&M, Contingency Plans, and PIA.• Conducted RMF briefings to the client explaining the life development cycle of the system and provide continuous security monitoring of assigned systems and made decisions either in critical or marginal risk situations. • Maintained an understanding of operations throughout the organization to proactively enhance the user experience of new security policies and procedures. • Collaborated with other security personnel on security assessment activities and reviewed results of vulnerability scans to ensure client system is devoid of critical and high vulnerabilities.• Assessed the information technology systems, security regulatory risk management and security vulnerabilities. • Supervised and performed system vulnerability scanning and administration of system security configuration using Tenable Nessus vulnerability scanner.

London, Gb

• Acted as lead staff auditor and helped coordinate multiple engagements, gaining valuable hands-on integrated audit experience with publicly traded and private clients• Assisted in the planning/development and finalization of engagement scope and the development of audit strategy• Assisted in the preparation of full disclosure financial statements from client records for both publicly traded and private clients• Reviewed detailed audit programs and coordinated the request for client documents and other checklists to perform the audits• Worked on accounting projects where familiarity with pertinent Internal Revenue Code (IRC) sections and regulations was required• Analyzed clients' financial statement variances and effectively communicated those variances to client management• Analyzed potential deviations from Generally Accepted Accounting Principles (GAAP), within clients' financial statements• Enforced Internal Control processes and communicated weaknesses on clients' financial statements.• Identified Sarbanes-Oxley (SOX) control operating deficiencies and provided remediation guidance for applicable deficiencies• Provided coaching and mentoring for subordinate team members/interns• Developed and maintained a productive working relationship with client personnel and firm staff while identifying, communicating, and resolving issues

Master Of Science - Ms, Information Technology/ Information Assurance

Bachelor Of Science - Bs, Accounting