Kofi A. Mainu, Cgrc Email & Phone Number

Elgin, Tx, Us

Pflugerville, Texas, United States

• Develop and enforce security policies and procedures in compliance with Texas HHSC standards.• Conduct risk assessments and implement operational security controls, improve compliance with state requirements, and enhance the risk posture by 15%.• Support vendor correspondence to correct compliance deficiencies, ensuring continuous improvement in security practices.• Oversee the planning and completion of daycare programs. This includes organizing activities, creating agendas, and implementing policies and procedures.

Veterans Affairs (Va) Austin, Tx

• Led system security assessments of cloud-based systems using FedRAMP frameworks, ensuring 100% compliance with federal security standards. • Developed and updated System Security Plans (SSPs) and POA&Ms, reducing outstanding vulnerabilities by 90% and enhancing remediation accuracy. • Authored Security Assessment Reports (SARs), providing senior management with actionable insights and elevating critical risks for immediate remediation.• Supported all phases of the RMF process - Categorize, Select, Implement, Assess, and Monitor - by ensuring rigorous alignment with NIST 800-37 guidelines, strengthening system security and compliance across the entire lifecycle.• Responsible for interpreting the Nessus vulnerabilities scan to improve the security posture of federal information systems.

Veterans Affairs (Va) Austin, Tx

• Conducted independent security control assessments for multiple systems, verifying the effectiveness of 300+ controls using NIST SP 800-53, resulting in a 90% reduction in security incidents.• Performed system risk assessments for new applications following NIST SP 800-30 standards, enabling informed risk management decisions for newly deployed capabilities.• Led the preparation and categorization task of the RMF process, ensuring compliance and risk reduction across 10+ IT systems.• Coordinated with vendors to address security deficiencies, ensuring timely resolution, and improving compliance by 20%.• Collaborated with auditors during FedRAMP and FISMA compliance reviews, improving audit readiness and contributing to the successful completion of three major assessments.

Veterans Affairs (Va) Austin, Tx

• Reviewed and updated essential security documentation – such as SSP, SAR, PTA, PIA, MOU/SIA, RA, CP, IR, and POA&Ms – to ensure compliance and alignment with NIST 800-53 standards.• Served as the primary point of contact for Plan of Action and Milestone (POA&M) finding, responsible for updating and maintaining data within the eMASS integrated risk management tool.• Led the security control assessment process, validating the implementation of over 500 controls and achieving a 95% compliance rate in alignment with NIST RMF guidelines.

Washington Dc-Baltimore Area

• Conducted security audits for third-party assessments, ensuring strict adherence to FedRAMP and NIST standards, contributing to a 30% improvement in compliance scores.• Developed and refined POA&M tracking processes, improving the accuracy of remediation activities by 20%.• Facilitated the development of security policies and procedures, strengthening cybersecurity readiness and elevating organizational maturity levels.

Rockville, Maryland, United States

• Managed FIPS 199 categorizations using NIST SP 800-60, ensuring consistent compliance with federal regulations.• Collaborated with IT teams to conduct disaster recovery testing, boosting the organization’s response capabilities by 25%.• Provided key input for the creation and execution of business continuity plans, contributing to a 15% reduction in system downtime.