Jonathan Kum Email & Phone Number

Baltimore, Maryland, United States

• Conduct IT compliance audits, ensuring adherence to SOX, GDPR, and PCI-DSS regulations.• Collaborate with cross-functional teams to mitigate risks and ensure business continuity.• Develop and improve IT security and compliance policies, ensuring proactive regulatory adherence.• Monitor compliance metrics, providing insights to senior management and proposing remedial strategies.• Deliver company-wide training on compliance and security best practices.

Maryland, United States

Led RMF processes, including system categorization, control implementation, and assessment.• Drafted key RMF documents: SSP, SAG, CBCP, CONOPS, and IRP.• Performed vulnerability scans using Nessus and SPLUNK, developing POA&Ms for remediation.• Ensured continuous compliance via NIST 800 standards.• Communicated security postures and findings to stakeholders.

Baltimore, Maryland, United States

Supported enterprise applications with security controls compliance per NIST 800-53A.• Developed and updated Information Security System Policies and baselines.• Collaborated with auditors to maintain system ATOs and resolve open POA&Ms.• Monitored system security to ensure ongoing compliance post-ATO.

Conducted security assessments for RMF and FedRAMP compliance, developing ATO packages.• Created key assessment deliverables: SAP, SAR, and vulnerability assessments using Nessus.• Led teams during assessment projects, coordinating deliverables and timelines.• Utilized GRC tools like CSAM for governance and risk management.