Hannah M. Email & Phone Number

Austin, TX, US

Remote

• Senior Cybersecurity Engineer, GRC specialist, Technical Writer, and Scrum Master contracted by Pinnacle Group to work with AT&T Cybersecurity on a 3-month contract.
• Conducted a formal Security Control Gap Assessment of a government client’s control environment against the NIST 800-53 controls. Findings and Remediation Plans were drafted and maintained in RSA Archer.
• Developed and implemented strategies to improve workflows by establishing a secure document management process.

Texas, United States

• Implementation: Helped improve and implement over 400 security controls.
• Risk Assessments: Conducted Risk Assessments, and Application Security Reviews to identify vulnerabilities or compatibility issues concerning 3rd party software onboarding into the environment.
• Collaboration: Worked with application owners and their teams to develop, implement or change security controls to specifically safeguard the organization's infrastructure and data.
• Provided: guidance on the implementation of security controls.
• Ensured: Alignment with Industry Regulations and standards, contributing to the development of a secure and compliant environment.
• Technical Writing: Produced content on various elements such as team process documentation and control writing.

Texas, United States

• Promoted to Cybersecurity Analyst II
• Analyzed and Interpreted: Threat intelligence data to identify potential cybersecurity threats and vulnerabilities.
• Collaboration: Worked with teams to develop and implement strategies to mitigate emerging threats.
• Conducted: Leveraging a tool to scan the dark web, I was able to identify specific threats to The Home Depot, via running queries on The Home Depot specifically.
• Contributed to: The development and implementation of security measures to safeguard the organization's infrastructure and data.​​​​​​​
• Assessments: Conducted Periodic Vulnerability Assessments that identified popular threats among specific threat actors or groups.

United States

• Led policy writing activities and uplifted old policies with new ones to ensure compliance with relevant aspects like PCI.
• Met with teams and leadership to answer questions and close gaps, enhancing cybersecurity awareness initiatives.
• Utilized RSA Archer as the GRC platform and collaborated with compliance teams to ensure policy coverage.

United States

• Managed large projects and reported metrics weekly to upper leadership.
• Implemented new endpoint management profile for training computers, using JAMF to streamline enrollment process.
• Led Cybersecurity Awareness Initiatives to educate employees on best practices.
• Promoted to: Cybersecurity Systems' Engineer GRC

Austin, Texas

• Contributed to writing new cybersecurity policies for all of the CIO.
• Independently wrote 14 Best Practice documents that were published with the new policies as approved resources.
• Helped incorporate a GRC program, focusing heavily on policy and risk frameworks. NIST CSF became the approved risk framework and NIST 800-53 the official source for security controls.
• Conducted data discovery exercises with application owners to help them understand how to classify their own data in accordance with new Cybersecurity Policies and data requirements.
• Evaluated 3rd party procurement requests and ensured that no 3rd party solution could be onboarded into IBM's environment without meeting the Data Security Requirements specific to 3rd party procurement.
• Met with 3rd party vendors directly to verify they were meeting IBM's data protection policies for 3rd party procurement.

Austin, Texas

• ​​​​​​​
• Helped launch and provide technical support to the Mac@IBM program at IBM, which allowed employees to choose an Apple device as their workstation.​​​​​​​
• 30,000 Macs deployed in the first six months.
• Worked directly with Apple and JAMF Engineers to address issues and perform QA.
• Published Incident Response Processes for Apple users in collaboration with Cybersecurity.
• Established direct engagement processes with Apple and led Cybersecurity Awareness Initiatives with the Cybersecurity Team.

The Estelle Unit- Huntsville, Texas

-Criminal Justice.-Physical Security.-Internet of Things devices. -Processes and procedures. -Conflict Resolution.