Responsible for developing and implementing a security program for the organization, architecting, implementing, and administrating the company's entire technology and security stack, monitoring the environment and performing incident response, and managing compliance efforts related to NIST 800-171, Cybersecurity Maturity Model Certification (CMMC), ISO 27001 and ISO 20000-1.Information Security Compliance• Developing the security program from the ground up to comply with NIST 800-171, CMMC, and ISO 27001Cybersecurity• Developing and implementing security awareness program• Responding to cyber incidents• Hardening systems in accordance with DISA STIGs and vendor security guidance• Developing and implementing group policy• Writing standard operating procedures (SOPs)• Developing workflow automations in Power Automate to support SecOps• Implementing and monitoring Tenable.io vulnerability scans• Selection and implementation of enterprise password managerMicrosoft 365 (M365) and Azure Administration• Managing all M365 users and associated licenses• Planning and engineering of Azure subscriptions and associated resources (virtual machines, web applications, databases, etc)• Implementation and monitoring of Azure Sentinel SIEM• Implementation of Azure hardening such as conditional access policies, Privileged Identity Management (PIM), mobile device management (MDM) profiles for Android and iOS, and much much more• Packaging and deployment of Windows, Android, and iOS applicationsZscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) Administration• Selection of and implementation of ZIA & ZPA• Managing ZIA SSL inspection rules and more• Managing ZPA application segments and moreEnd User Support• Selection and implementation of Zendesk Support• Selection and implementation of remote support solution• Providing excellent tier 1/2/3 support to end users• Writing support SOPs and end user knowledge base (KB) articles in Zendesk

Responsibilities have included supporting the USMC’s Network Access Control, Compliance and Remediation (NACCR) RMF (Risk Management Framework) package, and leading the company's charge towards NIST 800-171 compliance and the CMMC.RMF Support• Analyzing DoD and USMC policies to ensure the program’s implementation of RMF is on point• Assisting the Information Systems Security Manager (ISSM) in developing a strategy to integrate cyber requirements into the programs schedule• Documenting RMF security controls and control correlation identifiers (CCIs)• Developing Assess & Authorize (A&A) artifacts such as the information assurance vulnerability management (IAVM) plan, PPSM source material, system diagrams, and more• Analyzing information assurance vulnerability alerts (IAVAs), Nessus scans, and STIG results for security impacts• Coordinating with the COTS vendor to address FIPS compliance, IAVAs, STIGs and moreSharePoint Development• Created a tool which generates an information security continuous monitoring strategy (ISCM) schedule based on the frequency of control monitoring that are defined in the ISCM• Created other tools such as an IAVA tracker, task manager, and more

GRCAcademy.io is a training and research platform for anyone who wants to increase their knowledge in the cyber GRC space!I have published the best CMMC Overview course of the market and host the GRC Academy podcast!GRC Academy also offer security control explorers for CMMC, NIST 800-171, NIST 800-53, and more!

I design and host websites! I have engineered a cloud (Azure) system that hosts my customer's websites, and I offer service plans to maintain them. I've also developed several PHP-based plugins (including one to manage subscriptions) and have created some REST API integrations.I've published two CVEs that impacted a WordPress plugin which was installed on 200,000+ WordPress websites, and worked with the vendor to resolve the issues.I've also developed a chrome extension and published a web development course on Udemy (9,000+ Students in 127 Countries).

Responsibilities have included supporting a weapon control system in the transition from DIACAP (DoD Information Assurance Certification and Accreditation Process) to RMF (Risk Management Framework).RMF Support• Analyzing DoD and Navy directives to ensure the program’s strategy to implement RMF is on point• Populating the system's record in eMASS• Analyzing and tailoring RMF security controls• Developing Assess & Authorize (A&A) documents and system diagrams• Assisting the Information Systems Security Manager (ISSM) in determining a strategy to integrate cyber requirements into the program• Coordinating with other competencies in the program to assess the RMF controls and Control Correlation Identifiers (CCIs)Program Support• Providing comments on the security classification guide (SCG)• Acting as the lead Cybersecurity scheduler supporting a program’s Integrated Management Schedule (IMS)• Developing and giving briefs to program leadership regarding RMF implementation status and other cybersecurity issues.SharePoint Development• Developed a Contract Reporting Tool that is used to consolidate inputs for monthly reports• Developed information management dashboard to assist in the management of day to day task management

SharePoint Administration and Development:• Responsible for managing Integrity Intel's Office 365 SharePoint 2013 intranet site.• Developing SharePoint tools using SharePoint Workflows, OOTB webparts, HTML, CSS, jQuery and jQuery UI.

Responsibilities have included directly supporting the USMC Certifying Authority (CA), providing C&A oversight, and administrating and developing SharePoint 2010 resources in support of the mission.Certification and Accreditation (C&A):• Performing risk assessments of IT systems and making recommendations to the CA.• Providing C&A support to MCSC programs throughout the DoD Information Assurance C&A Process (DIACAP).Information Systems Security Manager (ISSM):• Monitor OPDRS messages, research vulnerabilities, coordinate with staff to mitigate or resolve CAT I, II and III findings on the system's POA&M, and coordinate with MCSC and HQMC staff to migrate the system to the MCEITS data center.SharePoint Administration and Development:• Developing SharePoint dashboards and tools using SharePoint Workflows, OOTB webparts, HTML, CSS, jQuery, jQuery UI, and SPServices. These dashboards and tools are used to gather metrics, manage operational tasks, monitor FISMA compliance, and forecast required staffing levels.Workforce Management:• Assist the CA in maintaining in a certified cybersecurity workforce.

Responsibilities included managing a suite of IT applications as the Project Manager and Contracting Officer Representative, leading a team of procurement analysts, improving processes, administrating SharePoint, performing IT Procurement duties, and supporting the Product Manager.Project Management:• Led a team of IT procurement analysts• Managed a suite of IT Applications and a Technical Team of eight individuals as the Project Manager and Contracting Office Representative (COR)• Improved processesSharePoint Administration:• Administrated and developed a SharePoint 2007 site• Created a Training and Education Command’s (TECOM) G6 dashboard which aided in the obligation of $1.8 million expiring PMC funds• Created an IT Procurement dashboard which tracks procurements by phases and is used to generate reports and metricsIT Procurement:• Reviewed Customer Requests in the Shopping Cart application• Reviewed IT Procurement Request Review/Approval System (ITPRAS) Requests• Coordinated with contracting officers• Participated in a Source Selection Board as the SSEB Technical Advisor

IT Support:• Acted as the technical mediator between customers and the Navy/Marine Corps Intranet (NMCI)• Communicated guidance on policies and procedures• Provided desktop support• Supported users of Total Information Gateway for Enterprise Resources (TIGER)• Programmed and troubleshot BlackBerries• Maintained printers• Supported projector and VTC systems• Scheduled reservations for the conference rooms in the command

IT Support:• Maintained site’s OU in Active Directory• Monitored network activity and enforcing security policies• Configured computers• Provided desktop support• Tracked assets utilizing an asset management tool• Supported printers• Administrated the Inter-Tel 5000 phone system