Position: Information System Security Officer.Developing and implementing security policies and procedures in accordance with NIST and ISO standards.Continuing security control testing as part of the continuous authorization monitoring process using NIST, SP 800-137. Ensuring all employees and contractors receive awareness and security training for best practices in accordance with NIST 800-171. Reviewing and updating the security authorization process documents, such as the systems security plan (SSP), risk assessment (RA), contingency plan (CP), and CPT, using NIST SP 800-18 as a guide.Collaborating to develop agency security policies for review and approval by senior management. Ensuring security for the organization's information assets by implementing the correct security controls that enforce both confidentiality, integrity, and availability (C.I.A.) and applicable security measures such as firewalls, networks, and routers. Analyzing and prioritizing the vulnerability scan result for remediation while providing the report to the system administrator through the SharedPoint site.Providing status reports to the stakeholders on the progress of a POA&M, including any issues or weaknesses that arise from the scan result.Maintain security logs and documentation to ensure compliance with regulatory requirements. Reviewing audit logs from ManageEngine, a SIEM tool, on a weekly basis and updating the system engineer in case of any security concerns. Checking the active directory to review and reporting any active accounts to the system admin.Ensuring all data in CSAM is up-to-date, and accurate to include control implementation statements.Reviewing and validating user access rights to the system in case a user role was changed or an employee no longer worked for the company.Participating in Security Contingency Plan Test (CPT)Attending change control board meetings on a regular basis using Microsoft Teams.

Collaborated with peers to convert leads into opportunities accounts, close deals, respond to cases, and more using the Salesforce platform as a tool. This enabled the company to increase sales and planned better marketing strategies.Collaborated with the team to keep track of communications with clients' and employee’s using the salesforce chatter tool. This helped to easily manage/update the client records, update peers in real time.Used the Salesforce service cloud to manage automated reminders set for leads, office staff, employees, contractors, and clients. This helped to prevent unforgotten transactions. Use the Salesforce ecosystem to track processes, and manage applicant resumes. This helps to easily screen candidates and allocate applicant resumes to the appropriate available personnel.Use the Salesforce platform to collect and store clients and employee's information for administrative purposes.Collaborated with human resource staff to perform other administrative duties which include but not limited to, processing applicant background checks, reviewing contracts, helping with employee orientation, and more.