Jeff Goodwin Email & Phone Number

Miami, FL, US

Remote First, US

Denver, Colorado, US

San Francisco, CA, US

Boston, Massachusetts, US

Miami, FL, US

• Provide independent assessment and assurance of the effectiveness of the IT Control Environment
• Coordinate resolution of system vulnerabilities and conduct follow up testing to ensure deficiencies are corrected
• Work directly with process owners and management to ensure design and implementation meet security and compliance requirements
• Assess product, compliance, or operational risks and develop risk management strategies
• Conduct cloud security and governance audit and access reviews for Microsoft Azure subscriptions
• Acts as the conduit between internal control owners and external auditors, including kickoff meetings, interview requests, follow-ups, evidence gathering, and closing meetings

Falls Church, Virginia, US

• Conduct in depth Security Test and Evaluations (ST&E) and vulnerability assessments through the use of automated tools and manual checks and create remediation reports in accordance with NIST 800-53
• Coordinate resolution of system vulnerabilities and conduct follow up security testing to ensure deficiencies are corrected
• Assist in defining and enforcing enterprise security baseline
• Create and draft required security documentation in order for a system to receive accreditation, Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), draft requests for Interim Authority to Test.
• Provide guidance and evaluation of system security requirements in accordance with customer security requirements
• Accurately review and evaluate System Security Plans (SSP) and policies for veracity, completeness and conformance with IA requirements

Falls Church, Virginia, US

• Provide Departmental level security oversight to assigned components in accordance with FISMA, OMB-130A and NIST 800 series guidance
• Provide program management emphasis on system security controls addressed in the Presidential Management Program (PMP) in accordance with NIST guidance for the certification and accreditation of systems
• Meet with component ISSMs and ISSOs to ensure security controls are in keeping with NIST guidance
• Identify security weaknesses and advise components on possible remediation
• Provide components system security educational training and awareness on associated computer security tools, processes and identified procedures
• Interpret policy directives assisting the components with establishing security controls within the perspective organizations

Falls Church, Virginia, US

• Develop, maintain, review and update system security plans and documentation
• Ensure the network, site, or application system is approved for operation in accordance with customer requirements
• Conduct comprehensive evaluations of technical and non-technical security features of systems
• Conduct periodic reviews to ensure compliance with security documentation and policies
• Review and identify potential security risks in proposed architecture to include hardware, software, ports and protocols
• Advise on risk mitigation for potential risks or vulnerabilities in proposed or existing systems

Master'S Degree, Network Security

Bachelor'S Degree, Management Information Systems