Oluseyi . Email & Phone Number

District Of Columbia, United States

Ensure assigned systems maintain an ATO• Develop the Privacy documents (PTA, PIA)• Obtain knowledge of secure use of controls within systems• Support management on security-related issues• Ensure system security controls are documented in accordance with-in NIST 800-53A requirements.• Ensure systems comply with security policies and mandates Federal Government (Memos, Directives) and FSA Guidelines (compliance)• Ensure the existence of protective measures against threats• Ensure system boundary is accurately identified• Ensure the SSP and other security documents exist, follow templates and accurately reflect the controls in place• Track system SDLC changes and determine impact (SIA)• Review system and privileged user accounts• Monitor system deviations and vulnerabilities• Worked on implementation of information technology (IT) security controls and security authorization documents; and assures the system is compliant with mandated security policies and requirements.• Provides recommendations for all Risk Assessments and Vulnerability Assessments conducted for the system.• Assist in the developing of security documentation including System Security Plans, Contingency Plans, Incident Response Plans, System Inventory documentation etc.• Provides security analysis of IT activities to ensure that appropriate security measures are in place and being enforced.• Ensures that plans of actions and milestones (POA&Ms) or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc. Manages timely processing of POA&Ms.• Identifies any possible security violation and takes appropriate action to report the incident as required. Supervises or manages protective or corrective measures when a cybersecurity incident or vulnerability is discovered.• Ensures that all Systems security controls, address information security requirements consistent with Agency’s security goals.

Mc Lean Va

• Provide agency with knowledge and guidance in following NIST, FISMA, and Information security and Privacy Guidelines.• Support enterprise security activities, including information security program management and cybersecurity management.• Support information assurance, security assessment and authorization, and information security.• Provide Cybersecurity support to include Operational Vulnerability Testing on systems and IT applications and services, and preparing Security Authorization Packages and Artifacts.• Created and maintain existing information system security documentation, including System Security Plan (SSP), Getting Artifacts for Security Controls that needs testing for the purpose of security control assessments.• Performed annual core control assessments; directs Security Assessment & Authorization (SA&A) documentation updates; and performs required vulnerability scan reviews or ad hoc scan reviews depending on vulnerabilities.• Identifies and reports Plans of Action and Milestones (POAMs) to system owners at a detailed level; monitors for corrective action; and submits reports for the monthly POAM meeting.• Document control status and implementation statements in CSAM.• Schedule, conduct, and document Contingency Plan test, Incidence response.• Review audits log as provided by Splunk for suspicious activities.• Prepared system documentation for assessment in accordance with the Risk Management.• Assist with implementation statements criteria questions for the system being assessed to determine if requirements are applicable and to tailor control statements.• Tracked findings with Plan of Action and Milestones (POA&M) through mitigation and/or risk acceptance.• Conducted periodic and continuous reviews of the system to ensure compliance with the authorization package.• Participated in the change management process, including reviewing Change of request (CR).• Conducted weekly and monthly audit review

Reston Va

• Developed or modify implementation and design documents describing how security features are implemented.• Prepared system documentation for assessment in accordance with the Risk Management Framework (RMF) and NIST Special Publications (800-37, 800-53 and others); identify deficiencies and provide recommendations for solutions.• Tracked findings with Plan of Action and Milestones (POA&M) through mitigation and/or risk acceptance.• Maintain existing information system security documentation.• Conducted periodic and continuous reviews of the system to ensure compliance with the authorization package.• Worked with the Information Assurance (IA) team to perform basic system administration and maintain various IA tools, including audit collection and reporting systems, vulnerability management programs, and other continuous monitoring capabilities.• Participated in the change management process, including reviewing Change of request (CR) and assist in the assessment of a potential change’s security impact.• Conducted weekly and monthly audit review and management of the audit collection system.• Monitored system recovery processes in TRAL table to ensure security features and functions are professionally restored and functioning correctly following an outage.• Created implementation statements criteria questions for the system being assessed to determine if requirements are applicable and to tailor control statements.• Document control status and implementation statements in IACS (XACTA).• Schedule, conduct, and document Contingency Plan Test.• Update SSP in IACS by entering in all information in the required fields, and record assessment results.• Review and acknowledge Information Security Vulnerability Management (ISVM) alerts in Continuous Diagnostics and Management Tool (CDMT).• Review audits log as provided by Splunk for suspicious activities.

Largo, Maryland

• Created and maintain existing information system security documentation, including System Security Plan (SSP), Security Controls Matrix and/or Assessment.• Developed or modify implementation and design documents describing how security features are implemented.• Prepared system documentation for assessment in accordance with the Risk Management Framework (RMF) and NIST Special Publications (800-37, 800-53 and others); identify deficiencies and provide recommendations for solutions.• Tracked findings with Plan of Action and Milestones (POA&M) through mitigation and/or risk acceptance.• Maintain existing information system security documentation.• Conducted periodic and continuous reviews of the system to ensure compliance with the authorization package.• Worked with the Information Assurance (IA) team to perform basic system administration and maintain various IA tools, including audit collection and reporting systems, vulnerability management programs, and other continuous monitoring capabilities.• Conducted daily, weekly, and monthly audit review and management of the audit collection system. • Implemented vulnerability management programs, accessing applicability to existing systems, and ensuring closure.

Master’S Degree, Cyber Security, 3.5

Masters in Cyber security

Bachelor'S Degree, Economics

Bsc. Economics