Hannah Roller Email & Phone Number

- Work closely with stakeholders to establish, document and maintain security policies for the organization.- Perform internal audits of policy compliance and manage mitigation efforts.- Review data to identify, document and report any vulnerabilities in the system.- Facilitate internal reviews of compliance and identified risks, as defined in the policies.- Research and advocate for the latest security technologies and solutions that support the internal and external customer needs.- Monitor industry sources for emerging cyber threats and collaborate with teams to establish risk profiles.- Champion secure development practices and facilitate continuous improvement of the security posture of the company.- Learn about and share: new ideas, methodologies, techniques, and technology through conferences, self study and industry updates.

- Worked with multi-functional groups and staff in the testing of procedures, standard or regulatory controls to ensure the security and privacy of information on Sprint’s Network. Developed and maintained SSP and POAMs.- Participated in information security review of new technologies, designs, and remediation planning efforts.- Served as liaison between Cybersecurity, IT Operations, engineering, upper management and department representatives to further the adoption of and support for compliance plans, procedures, and regulatory controls.- Investigated potential compliance failures, identifying security needs and recommended plans/resolutions.- Supported the collection and documentation of an accurate inventory of technology, processes and people that are required to align with regulations, industry standards, and company policies.- Contributed to security projects driven by groups both internal and external to info security.

- Conducted security assessments using the Risk Management Framework (RMF). - Provided guidance on policies and procedures to ensure compliance within an accreditation boundary. - Implemented security strategies to control and manage organizational information risks. - Assessed information systems to determine risk exposure and develop documentation addressing system security requirements. - Enhanced information security education within the organization and team. - Monitored the latest security technologies to ensure that project personnel remain in the know.

Education record

Bachelor Of Science - Bs, Computer Science