Lead and provide assessment support evaluating the security and compliance of client Cloud Service Provider's (CSP) information system and components, following regulatory and industry requirements, standards, and security best practice frameworks, specifically the FedRAMP framework.Experience• Strong technical knowledge of NIST 800-53 controls• In-depth knowledge of FedRAMP framework• Ability to run assessment projects successfully from start to finish• Exceptional knowledge of Amazon Web Services (AWS) infrastructure and services• Notable mentorship skills with Associates• Ability to lead client meetings including status calls and interview sessions• Exceptional written and verbal communication skills • Lead and provided support for the authorization of over 150 service to the FedRAMP marketplaceProject Management• Generate assessment reports per project requirements (i.e. RAR, SAP, SAR, etc.)• Ensure quality products and services are delivered on time and within allotted hours• Maintain oversight and provide direction/support to team members• Collaborate positively with delivery team members to drive customer satisfaction and meet project deliverablesTesting and Documentation• Maintain a consistent writing style and approach to conducting assessments• Assess all controls thoroughly via documentation review, client interviews and observations• Identify and assess security vulnerabilities appropriately• Perform self-review and peer review of deliverables to ensure accuracy and quality of workAutomation• Assist with the development and implementation of automated tools to create efficiencies in manual tasks

AWS FedRAMP assessment experience: •Onboarding Cycles: 9 packages and a total of 58 services in EastWest and GovCloud regions and several DoD packages within the last 8 months. Currently co-leading 2 Onboarding Cycles from beginning to end while managing a team to produce consistent and strong execution of duties, expectations, and deliverables•Annual assessment: Assessed over 250 services over a 3-year period in EastWest and GovCloud regions•Lead internal and external meetings and client communicationFedRAMP assessments experience: •Conducted manual control testing, client artifact reviews, onsite database tours, onsite and remote client interviews of network security, and developed documented deliverables for over 20 separate clients over a 3-year periodFedRAMP advisory experience: •Conducted, with a team, advisory activities for 2 clients which included the creation, maintenance, validation, and exercise of System Security Plans (SSPs), Security and Privacy policies and procedures, and Contingency and Incident response planning and testingFedRAMP CAP assessments experience: •Conducted, with a team, several CAP assessments which included working alongside SOC, HITRUST, and PCI auditors to deliver assessment results•Specializes in assessing service providers in the Security and Privacy Controls for Federal Information Systems and Organizations, in accordance with NIST SP 800-53A Rev 4. Assessments activities include authoring, development, testing, validation and delivering the following:- Attestation letter(s)- System Security Plan(s) (SSP)- System Assessment Plan (SAP)- Risk Exposure Tables (RET)- System Assessment Report (SAR)- Security Requirements Traceability Matrix (SRTM)•Assisted with the authoring of automated tools for the FedRAMP assessment teams to maximize efficiencies by utilizes VBA and excel commands•Test all technical and non-technical manual controls (AC, AU, CA, CM, CP, IA, IR, MA, MP, PE, SC, SI, PT)

As the leading FedRAMP Third Party Assessment Organization in the industry, Coalfire provides FedRAMP advisory and assessment services for cloud service providers (IaaS / PaaS / SaaS)• Executed, examined, interviewed, and tested procedures in accordance with NIST SP 800-53A Revision 4• Ensured cyber security policies are adhered to and that required controls are implemented• Validated respective information system security plans to ensure NIST control requirements have been met• Developed resultant Security Control Assessment documentation, including the Security Assessment Plan and Security Assessment Report• Authored recommendations associated with findings on how to improve the customer’s security posture in accordance with NIST controls

Bottling Investment Group (BIG) IT – Cloud Migration, Cyber Security, Troubleshooting, and Innovation • Developed an automated system to optimize storage space within select severs in preparation for cloud migration • Developed Tableau dashboards to aid in troubleshooting live storage metrics to the cloud migration • Worked with the Director of Innovation to help design and launch new apps and programs o BillBoss: An app created to aid customers with an easier alternative to pay for restaurant billso KO-Quest: A gaming app created to engage Coca-Cola employees on Coca-Cola news• Cybersecurity: Task - Create a 3-year plan to help spread awareness of cybersecurity threats within Coca-Cola’s system • Gained experience with IBM, City Analytics, and Watson to create city profiles within Networks marketplace

• Educate a startup app to more than 60,000 students and 10,000 faculty members • Lead and mentor a team of 4 campus managers • Oversee and plan the expansion of the company through various growth-hacks, marketing strategies and product development across 20 campuses • Co-author on-boarding documents for newly hired campus managers • Author content on a weekly basis to engage with users through Snapchat, LinkedIn and Facebook

• Responsible for educating a startup app to more than 30,000 students and 2,000 faculty members• Outperformed 4 universities by earning more than 500 users in one month • Organized and planned 7 events that attracted more than 1,500 individuals • Acquired partnerships with two organizations with more than 80 active members yielding a 75% user growth rate in one week • Furthered total downloads and populated marketplace by at least 50% within a week • Reduced marketing costs by formalizing a grassroots marketing campaign• Addressed the app in a purposeful manner when being interviewed by a school newspaper and a local news station