Guided System Owners and ISSOs through the C&A process by monitoring and reviewing required documents including security testing and evaluations to ensure adherence to client’s security policy as well as FISMA and NIST requirements. Participated and represented IT Infrastructure in cross-functional teams to solve complex cybersecurity incident issues and communicate the analysis to clients and leadership. Worked with Service Providers and PMO to help identify security-related items for Payments and vendor-supported Systems and provide Security guidance to new and ongoing infrastructure projects.Ensured that compliance for PCI standards is maintained across all departments. Coordinate with other members of the information technology function and end user departments to implement and sustain appropriate technical and procedural controls to support this objective. Remain apprised of pending changes to standards and proactively design and apply appropriate measures.Monitored PCI DSS compliance of relevant hosting partners and application vendors.Perform ongoing security procedures, including review of firewall activity and other system logs, vulnerability (anti-virus, software/firmware patch) management, periodic system intrusion testing and investigation of exception conditions.Developed, maintain and monitor compliance with Information Security Policies. Oversee security policy education/awareness across the organization.Developed, update and test the Information Technology Incident Response PlanPerformed comprehensive Security Controls Assessments (SCA) and wrote reviews of management, operational and technical security controls for audited applications and systems.Assessed the impacts, helped orchestrate updates and changes in the client’s enterprise, and provided expert advice about how to most effectively sustain full operational continuity to protect critical systems.