Joel Waugh Email & Phone Number

Washington, Dc, Us

Washington, Dc, Us

As the Director of Cybersecurity Risk Management, Deputy CISO and Authorizing Official for Metro, I manage the secure deployment of systems and applications into operational status. My team and I work across the organization using the NIST Cybersecurity Framework and Risk Management Framework (RMF) to govern the secure use of technology that protects 17,000 employees and contractors and nearly a million daily commuters.Back2Good!

Washington, Dc, Us

Responsible for the preparation of security documentation and assessment artifacts for over 500 enterprise networks, hosting environments and information systems. In under 9 months, I spearheaded the creation of an enterprise-wide initiative to modernize the NIST Risk Management Framework within the FBI to create a flexible, context-aware framework. The initiative applied the NIST Cybersecurity framework for prioritization of activities, and relied heavily on control inheritance standard application of system level controls to streamline the implementation and assessment process.

Washington, Dc, Us

As an Information Technology Specialist working at headquarters, I oversaw the merger of information system security support with five HQ divisions, a quadrupling of managed information systems and contract staff growth from seven to thirty five personnel.

Herndon, Virginia, Us

Arlington, Us

Volunteer as a coach for the Arlington Soccer Association, Lightning Club boys’ 1st grade soccer team. Encourage young children with positive reinforcement and patience. Prepare for team practices, transport gear for games and ensure that all kids have their protective gear. Most importantly: enjoy the experience!

Reston, Va, Us

Lead Information Systems Security Officer (ISSO) for Knowledge Consulting Group, provided contract support to the Federal Bureau of Investigation. Directly responsible for the secure operation of over 30 current and future information systems and applications across 22 offices and divisions of the supported federal government client.Managed and directed the activities of 4 security professionals to ensure that IT security program objectives are completed. Planed the implementation and oversight of IT policies and procedures. Served as the subject matter expert for IT & IS security matters for subordinates, peers, and management. Major duties include:• Security system operations and management (including access control and other policy implementation);• Information System (IS) Security planning and documentation;• Security monitoring and evaluation (including audit, assessment, and risk management);• Customer support and security integration;• Security awareness training, and;• Security incident reporting and response management.Key achievements include:• Recognized by both private industry employer and the government client for exceptional performance and accomplishment; given the KCG Trusted Advisor of the Year Award, Selected as the Security Professional of the Year by the agency Chief Security Officer. • Successfully managed complex project plans the for the pilot roll-out and full deployment of a major financial management system including the design and implementation of a secure access control model that allows over 2000 employees to perform critical financial management activities while meeting the stringent requirements of the IT Security Controls. The system has successfully passed its first annual audit cycle as well as the first 100 days of use. • Selected as a one of 10 pilot ISSOs for implementation of Continuous Monitoring within the Government acency, including the testing of a new Enterprise Governance, Risk & Compliance system

Reston, Va, Us

Provide security engineering design, implementation and test support in all aspects of Information Assurance and Information Security (InfoSec) Engineering at all stages of the Systems Development Life Cycle (SDLC) process. Assess and mitigate system security threats/risks throughout the program life cycle; determine/analyze and decompose security requirements at the level of detail that can be implemented and tested; review and monitor security designs in hardware, software, data, and procedures; perform system certification and accreditation planning and testing and liaison activities; support secure systems operations and maintenance.Perform security engineering analysis, risk and vulnerability assessment, etc. Monitor and analyze security functional tests. Prepare Certification & Accreditation documentation such as System Security Plan, Security CONOPS, ST&E reports, etc.One-Year Highlights:• Created and documented an Incident Response program that fully supports and integrates into the agency incident response program; manages two ISSOs in the performance of incident response duties;• Personally managed five special projects to authorize necessary information technology equipment while maintaining system security requirements;• Managed the accreditation / re-accreditation of three major applications as well as the secure transition of two applications into a virtual environment;• Wrote several articles and web pages used to communicate complex information systems security requirements to a wide array of agency customers;• Passed the CISSP written examination, and;• Selected as the Security Person of the Year by the agency Chief Security Officer.

Arlington, Virginia, Us

Provide direction, leadership, management and coordination to a team of 17 Civilians, contractors and Soldiers in all facets and functions of the cyber and information security program for a Combatant Command Headquarters with over 2000 personnel spread over a large geographical area.Develop new theories, architectures, concepts, principles, standards, and methods in Information Technology (IT) security, Information Assurance (IA), and Communications Security (COMSEC). Manage the personnel security and physical security programs for compliance with applicable laws and regulations.Define the overall planning, execution and development of ASA's Information System Security Program (ISSP). Plan, develop and formulate IT security governance, plans, policies, and programs as they relate to the ASA's ISSP. Receive guidance from the Defense Information Systems Agency (DISA), Joint Task Force – Global Network Operations (JTF-GNO) and other external agencies and develop implementation strategies to ensure compliance while facilitating / maintaining operational capability.

Served as the Electronic Systems Maintenance Technician, Information Management Officer (IMO), and Combat Service Support Automation Management Officer (CSSAMO) for the 13th Combat Service Support Battalion (CSSB), which supports the US Army Infantry Center, 75th Ranger Regiment, and other installation customers as well as providing deployed area support in Iraq and Afghanistan. Was the primary advisor to the 13th CSSB Commander on all communications, electronics and automation matters. Selected to lead several key initiatives to upgrade and expand network capabilities, leveraging available technology in order to provide enhanced customer support.Deployed twice to Iraq in support of Operation Iraqi Freedom for a total period of 26 months. Led a team of 20 technicians supporting the electronics maintenance and information management needs of units in a corps-level area of operation. Implemented and audited information security and physical security measures, assessed threats and recommend changes to ensure the safety of mission critical data and assets. Awarded the Bronze Star for exceptionally meritorious service.

Instructed and trained military personnel, international students, and civilians in the installation and repair of complex electronic cryptographic equipment and state-of-the-art communications equipment. Provided instruction and evaluation on electronic circuit analysis, correct troubleshooting procedures, and completion of maintenance records and data. Maintained administrative records pertaining to student personnel. Counseled students on career development; and updated lesson plans.

Arlington, Virginia, Us

Supervised a team of multi-service, multi-national technicians in the repair and preventative maintenance of uninterruptable power supplies. Led a project to connect all power supplies to the local area network for remote monitoring.

Stabilization Force (SFOR), Sarajevo, Bosnia and Herzegovina

Arlington, Virginia, Us

NATO, Joint Signal Group, Izmir, Turkey

Arlington, Virginia, Us

Master Of Science, Information Technology / Information Assurance

Bs, Business Administration