Miles Murphy Email & Phone Number

Des Moines, Ia, Us

Urbandale, Iowa, United States

Digital Risk Office - AnalystPerforms as a second-line-of-defense function that is responsible for digital risk management and compliance, separate from the CISO organization. Responsibilities include: -Digital-threat risk management and assessment, governance, policies and standards, and digital risk reporting.-Provide engineering and technical implementation of GRC platforms (OneTrust), APIs, and the integration of multiple data sources.-Develop KPIs & KRIs using PowerBI to develop risk management centric dashboards used to inform stakeholders.-Inform & equip digital risk owners, from product owners to senior management, to make the informed risk decisions.-Standardize the assessment, escalation, and treatment process across digital risk domains to ensure reduction efforts focus on the top risk and control priorities.-Strengthen collaboration between risk governance and internal audit to commonly report risks and assure the business.-Sets the approach for framing, assessing, responding to, and monitoring risks.-Grow the digital risk culture to inform & equip risk owners.-Unify digital risk management to maximize risk & control resources.-Build cohesion across lines of defense to assure the business strategic objectives are met.-Guides risk management activities by defining tolerances, threats, assumptions, constraints, priorities, and trade-offs.-Provide a common model for identifying and assessing risk across digital risk domains.-Manages the process to accept or escalate risks according to tolerances.-Enables risk owners with operational metrics and tracks progress of risk mitigation efforts.

Conducts Defensive Cyberspace Operations to defend DoD and other friendly cyberspace. DCO includes passive and active cyberspace defense operations to preserve the ability to utilize friendly cyberspace capabilities and protect data, networks, net-centric capabilities and other designated systems.Executes command and control (C2) of cyberspace operations in support of DoD, interagency and Coalition Forces to establish situational awareness of both friendly and adversary operations. Develops operational tasks and orders, evaluates mission feedback, and aligns with strategic intent.Develops and executes TTPs. Analyzes national defense guidance and strategic objectives to create operational policies. Implements policies through the development of TTPs in support of assigned cyber capability execution. Plans, conducts, and evaluates exercises to enhance operational readiness.Establishes performance standards, trains and conducts evaluations to ensure personnel are proficient, qualified, and certified. Ensures units meet operational readiness goals and adhere to operational procedures.Participates in research and development as well as operational testing and evaluation to determine possible new or modifications to existing capabilities. Assesses and reverse engineers network nodes and infrastructure devices (to include operating systems and software applications) to determine capabilities, functionalities, limitations and vulnerabilities.Applies forensic and reverse engineering TTPs to determine the extent of the battle damage sustained during cyberspace attacks. These efforts may require partnering with other DoD, interagency and Coalition Forces.

Des Moines, Iowa Area

Supports the Distributed Operations Training Center (DTOC) with Information System Security Information Assurance support. Specifically, providing support regarding policy, procedures, implementation, and assessments IAW NIST/JSIG/RMF directives, develop and oversee the implementation of the security policy and provide guidance for securing Information Systems (IS). Creates, maintains, and updates DoD Wide Area Network ATO/ATC Accreditation packages according to current NIST/JSIG/RMF on multiple security levels and systems.Additionally, performs weekly system audits, evaluates threats and vulnerabilities to the classified network and ascertain whether additional safeguards are needed, records all security-related vulnerabilities and incidents, maintains and reports serious or unresolved violations to the DAA, and evaluates certification documentation and provides written recommendations for accreditation to the DAA. Assess changes in the system, its environment, and operational needs that could affect the accreditation, support, monitor, test, and troubleshoot hardware and software IA or IT problems pertaining to the assigned unit computer and network environment, and configure and manage enclave network environment IAW customer support policies, procedures, and standards.

Des Moines, Iowa Area

- Conducts Information Assurance (IA) risk and vulnerability assessments; ensures enterprise IA policies fully support all legal and regulatory requirements and are applied across all information systems- Identifies IA weaknesses and provide recommendations for improvement. -Monitors enterprise IA policy compliance and provides recommendations for effective implementation of IT security controls- Audits and enforces the compliance of IA procedures and investigates security-related incidents- Responsible for IA oversight or management of national security systems during all phases of the IT life cycles. Ensures the Confidentiality, Integrity, and Availability (CIA) of IT resources- Analyzes risks and/or vulnerabilities and takes corrective action. Ensures appropriate administrative, physical, and technical safeguards are incorporated into all new IT resources through certification and accreditation- Developed and implemented classroom and hands on training of IT security topics and tools i.e.- Security+, Firewalls, and Secure Shell (SSH), CISCO IOS, & Security Technical Implementation Guides (STIGs)- Serve as the authoritative source on all matters relative to multiple security disciplines and issue guidance in the evaluation and analysis of security needs- Assist in the conduct of security surveys, inspections, and compliance reviews IAW applicable regulations and policies at the appropriate classification level- Ensure compliance with safeguarding standards and assure implementation of corrective actions and appropriate- Support the security training and education program and serve as the Operational Security (OPSEC) coordinator- Support facility security including access control, visitor control, information and material control

Osceola, Ia

- Utilized diagnostic equipment troubleshoot to ascertain the condition of customer desktop PCs and laptops- Responsible for custom building/configuring desktop PCs to customer specifications- Assisted customers over the phone troubleshooting various technical questions regarding PC use and configuration- Leveraged anti-virus software (Mcafee, Symantic, Kaspersky) to remove malicious viruses from customer computers

Joint Base Pearl Harbor Hickam, Hi; Minot Afb, Nd

- Able to Identify, troubleshoot, and implement unique solutions for time critical and mission essential projects with zero mission capability lost with both short-term and long-term plans in place to alleviate future negative issues- Manage multimillion dollar inventory of electrical power production and aircraft arresting systems- Knowledgeable in a variety of military and commercial power generation units- Skillful at interpreting and deciphering electrical schematic diagrams- Oversee multiple air base sustainment programs including federally regulated underground fuel storage and work safety programs with zero discrepancies- Acted as new airman mentor - Participate in Non Commissioned Officer panel for the First Term Airman center- Awarded Airman Leadership School Commandant Award, voted by peers and senior leadership as the top contributor and most professional student.

B.S. Of Cyber Security And Risk Analysis, Information Technology

The bachelors in Cyber Security and Risk Analysis covers the multi-disciplined fields required to accurately and effectively assess.

Cyber Security

Information Systems Technology

Associate'S Degree, Mechanical Technology/Technician

3E0X2 - Electrical Power Production