• Categorize information systems, determine and assign the high watermark • Organize and participate in KOMs with clients to comprehend system nuances and ready the assessment groundwork• Prepare the project team for security control assessment in alignment with Security Assessment Plan (SAP) schedule• Initiate documentation requests from clients, including configuration management plan, account management plan, disaster recovery plan etc. • Collaborate with stakeholders for both pre and post Assessment and Authorization (A&A) activities• Select security controls, discerning common controls, hybrid and system specific controls• Conduct security control tailoring and scoping to tailor the security measures appropriately • Guide clients in the implementation of security controls and offer expert advise• Review and update security controls implementation descriptions for accuracy and relevance• Create and update Security Assessment Report (SAR) and Plan of Actions and Milestones (POA&M)• Scrutinize artifacts and provide constructive feedback to client on how to address and remediate findings• Conduct vulnerability scans using Nessus Security Center and present comprehensive vulnerability reports to clients• Compile comprehensive security Authorization Packages for Authorizing Official to make informed, risk-based decisions for granting Authorizations to Operate (ATO).• Collaborate with Assessor and project team throughout Information Security Continuous Monitoring (ISCM) processes• Develop Privacy threshold analysis (PTA) and Privacy impact Assessment (PIA) for comprehensive privacy evaluations

• Conducted complex policy analysis on myriad stakeholder credit policy programs• Managed numerous projects for the office including the Scorecard evaluation process, strategic planning initiative, and collaboration between offices, among other initiatives• Participated in several high-level meetings with internal and external stakeholders, including the Government Sponsored Enterprises (GSEs), affordable housing coalitions, and other government agencies.• Assisted senior policy analysts on several policy projects, such as, Conservatorship Scorecard projects and other high-profile initiatives. • Co-led efforts to develop the office strategic plan • Prepared briefing documents and memos, tracking priorities, and conducting follow ups both• Communicated with senior and executive staff, organizing meeting agendas, and preparing meeting minutes. • Prepared and delivered reports and briefings for senior leadership across the agency. • Initiated and coordinated the Controlled Unclassified Information (CUI) refresher course for the office and conducted a preemptive audit to validate office compliance with CUI standards• Presented new and innovative ideas for office quality assurance including combining individual office newsletters into one office newsletter, and offering feedback and insight on meaningful deliverables

• Leveraged Tableau to produce real time daily operational reports for management to monitor and support FHFA’s Letter of Instructions (LOI) to the Government Sponsored Entities (GSEs)• Facilitated office policy status meeting, provided status updates to policy submissions to all relevant stakeholders while receiving reports in advance of the scheduled meeting. • Developed and maintained system requirements for office in-house Workflow Tracking System (WTS). • Developed job aides and guidelines for in-house status report development.• Ensured the application of information security/information assurance policies, principles, and best practices.• Developed User Acceptance Testing guide and scenarios for office WTS version releases.• Developed test plans for office WTS quantity version releases.• Coordinated employees for User Acceptance Testing on version releases• Monitored and analyzed security events and incidents to detect and respond to potential security breaches or unauthorized access attempts.• Provided guidance and support to IT staff and system users on security-related matters, including security awareness training and education programs.• Coordinated with IT auditors and office of inspector General (OIG) to facilitate compliance audits and ensure adherence to security standards and regulations. • Participated in the development and implementation of disaster recovery and business continuity plans to ensure the resilience of our in-house IT systems and services.• Up to date of any emerging threats, vulnerabilities, and security technologies through continuous learning and professional development activities.• Assisted in the creation POAM (Plan of Action and Milestones) for identified vulnerabilities.• Prepared and presented regular reports and updates on IT security metrics, incidents, and compliance status to senior management and relevant stakeholders.