Mark O'Brien Email & Phone Number

Supporting Va

I am privileged enough to work with and on one of the best teams I've ever been on with team By Light on the Identity and Access Management program with VA. My role in this team is to lead the information assurance analyst team that:* Manages the continuous monitoring of the program* Steering the documentation for the variety of sub services into a total program documentation stream* Interface with a variety of external stakeholders in regards to the security posture of IAM and negotiating requirements between stakeholder and IAM* Lastly, I work to make the program and project managers lives easier by managing the IA of the IAM as a project. My job is to make the leadership successful in any way that I can.

Washington D.C. Metro Area

Working primarily with VHA related systems, I managed the Authority to Operate process for 2 projects in active development. This was an Iterative IA routine working in conjunction with the active Agile process.• Working with the PM, I developed the IA schedules, gathered stakeholders and used processes that I had developed previously for VA to succinctly work towards an ATO• In one project I took on the role as PM for IA and project risk management and facilitated other activities well outside of my scope to significantly increase the odds of success in gaining an ATO• On a second project, I was able to bring together previous experience in certain activities, as well as confirm information with many other professional contacts within VA, to assist in steering the Project Management Plan so as to avoid some pitfalls that lead to other projects failing. • I utilize many built relationships within VA to reduce the timelines of progressing through the A&A process

I managed the Information Assurance, security and IA risk Management aspects of a new project that gives veterans the ability to have referrals to doctors in hours instead of days or weeks. While in this position I accomplished:• Accomplished two Authority to Operate statuses for two constantly changing and still-in-development projects using live patient records.• Integrated the Information Assurance Management as a project within an actively developed Agile project, and built a very good relationship with the development team.• Used experience to forecast risks that were planned for months in advance before the risk was realized, and executed the risk mitigation as an operations manager also went as planned.• I took the IA schedule, WBS and library that I developed for projects and ported into an SOP for the company, as well as sending it to the VA for work in the transformation of VA activities that relate to IA

Jfhq

I am the tactical leader of the team that is charged with conducting forensic analysis of systems and networks after an intrusion and helping companies to harden their information systems to reduce their vulnerability footprint. The team is focused on large-scale cyber events, ISC/SCADA systems, and state/national strategic resources (Energy, transportation, food, et cetera) Develops and organizes training for the team to simulate real-world tactics, techniques and procedures Balances knowledge management, local necessities in critical information, and the overall intent to quickly develop courses of action to ‘hit the ground running’ Manages up to 5 other operators and coordinates with higher management to maximize the utility of the team Writes, reviews and edits procedures by thoroughly testing them before incorporating them into the standard toolbox Has headed up tiger teams to address national-level shortages in training and procedures, and has used current documentation from a variety of other agencies to develop concrete goals, training guidance’s, and methods for managing teams within diverse networks

Wichita, Kansas Area

I manage the enterprise Intrusion Detection/Prevention System (IDPS), which spans North America and the Pacific Islands, across two networks Monitored all traffic to in the enterprise to find risks to information and systems, to include mis-configurations, open but unexploited vulnerabilities, and bad-guy traffic Coordinated all these actions through a layered management structure to provide sound advice and assurances that required traffic would not be impeded First in the Air Force to implement a mitigation for Heart Bleed to the enterprise Trained and taught new employees on the IDPS so they are qualified to operate the system and understand how it integrates into the enterprise

As a liaison to the Air Force , I and my team offered technical expertise and management guidance to the bureau. The goal was to standardize the entire enterprise network for ease management, standardized methods of cyber security and compliance. Managed five subject matter experts to support security and virtualized systems for the enterprise I deeply integrated myself into the local operational community to remain aware of strategic plans in both the local enterprise and the Air Force Successfully built relationships between multiple organizations to open communications and for direct management of strategic goals Maintained situational awareness of approx. 20 projects and standardized the information pertaining to the status and impact of projects with management and operations Grew the local contract from the original three personnel to six through effectively communicating the requirements

The Air National Guard changed how they maintained network and system compliance to a centrally managed role; I was brought into a small team to create the process in which compliance throughout the enterprise would be achieved. Managed and successfully accredited 60 separate networks on two networks. Also accomplished the same for approximately 15 systems, and six top secret networks Audited networks and systems to ensure compliance, and to address any security concerns that would impact the accreditation Trained and mentored team personnel and remote personnel on the techniques and methods used to accredit the networks and systems Created and trained standard operating procedures and checklists for accomplishing many of the tasks, which were published both locally and enterprise wide Was recognized by many remote sites for how effectively I assisted them with getting networks and systems accredited and compliant

OBriNet SBSolutions was a business to get an in-depth understanding of how a business works. OBriNet SBSolutions focused on small & medium sized businesses, and specifically on safeguarding their critical information and also providing next day disaster recovery solutions. Replicated enterprise-level backup, systems management, and traffic management to provide clients the ability to see their data and explicitly manage access to the data Incorporated information management into business so data was actively thought about, not bolted on after plans were created Stressed to business to think of their data as the key to their business that supported their product or service, not a residue from it. Had unique business model that gave business 100% ownership of all services if they chose so to reduce their TCO and start incorporating data management into their daily routines Developed COOPs, DRPs, and remote access methods for businesses to quickly recover from any level of loss Strove to use organic equipment for security, though did incorporate enterprise level protection mechanisms (firewalls, routers, servers and operating systems) to increase security and significantly reduce the vulnerability footprint

Managed all IT and communications, compliance, and security for all the offices throughout Kansas. Was awarded the Excellence in Information Technology by DHS twice Routinely used problem solving skills and networking to solve complex problems while ensuring the solution was long lasting, maintainable and within the spirit of best practices Primary auditor for 10 sites in Kansas in regards to information security and assurance; included physical inspections, data inspection, employee interviews, and a variety of tests Coordinated with cities, airport staff, and external government agencies for a variety of reasons to ensure local IT and communications programs were successful and accepted Wrote statements of work, vetted contractors, worked with procurement, and supervised projects from small to state wide Managed 40 state and federal programs during daily operations as well as alpha and beta testing of systems and methods for viability Maintained the communications Continuation of Operations (COOP) plans, and wrote Disaster Recovery Plans (DRP) for a variety of systems, information, and technologies Taught new hire information security primer course and all quarterly refresher courses

Msit Ia, Information Assurance

Information Systems Management

Bas, Information And Computer Security

Graduate with Honors

Education record