Lawrence Baiden, Phd Cism, Crisc, Cisa, Ccp, Cc, Itil 4 Email & Phone Number

Chicago, Illinois, Us

-Lead the development of all deliverables, work products, and business development materials. -Oversee junior practitioners and their support in these activities to ensure quality of services and deliverables.-Serve as a vCISO to Sikich customers to help develop and/or maintain their security program.-Develop and maintain technology related policies, procedures, and standards that address requirements related to strategies, regulations, business & technology risks, and industry standards.-Execute control reviews across technology and business teams to address risk and compliance against various industry and technology frameworks (i.e., SSAE18 SOC2; NIST Cybersecurity Framework, CIS, and ISO27001).-Assist clients in meeting compliance obligations by evaluating business, technology & operations against security standards (ex. HIPAA, PCI, CIS, NIST, CMMC, etc.).-Manage assessment methodology, project planning, reporting, budgeting, & scheduling-Share expertise to help make top-level decisions on strategy & scope of engagements-Provide clear, organized findings & recommendations to clients & be able to track progress towards resolution.-Analyze requirements & work closely with team members to produce results aligned to client needs-Produce detailed, high-quality reports for clients & industry third parties-Work closely with the project team to ensure high-quality standards-Learn from the Security group & contribute tools, industry news & lessons learned back to the team.-Efficiently juggle several concurrent client projects at any given point in time.

Washington, Dc, Us

•Participate in routine information security assignments, and provide information and assistance on information security programs to a Region or Program Office.•Conduct vulnerability assessments of existing network and system configurations to identify vulnerabilities, risk, and protection needs.•Prepare and update information for training and awareness programs related to IT security programs.•Serve as Project Officer, Contracting Officer Representative (COR) or Contracting Officer’s Technical Representative (COTR).•Ensures proper system categorization of various systems and applications using NIST 800-60 and FIPS 199•Reviews Business Impact Analysis and conducted Disaster Recovery and Contingency Plans on Enterprise Wide Area Network (EWAN) as part of the annual assessment of the system•Reviews System Security Plan for change control implementations and approval•Performs Remote Access Request (RAR) and Firewall Rule Request (FRR) using Fortigate Manager•Coordinates Controlled Access to Isolated Networks (CAIN) firewall project using the Application Deployment Checklist (ADC) in deploying applications to be hosted in EPA's National Computer Center•Acts as Office of Information Technology and Operations (OITO) Technical Lead for the agency's Insider Threat program in performing use case review of business processes and tools•Ensures compliance of the mandate for web security for agency public-facing websites in accordance with the Department of Homeland Security (DHS) BOD 18-01. The focus is on contacting site owners and remediating security issues that are specified in the mandate.

Doctor'S Degree, Cybersecurity

Masters, Informatics Administration

Bachelor'S Degree, Geography