Robert A Hedidor Email & Phone Number

Role/Duty: - Lead Risk Monitoring and Management efforts using RSA Archer GRC.- Risk Register management and updates, collect information to identify, update and tracksecurity requirements continuously, create and maintain a Security Risk Register and mapto POAMs.- Interaction with enterprise Risk Owners and Remediation Owners for risk reviews andupdates necessary for risk tracking, updating, and closure- CIS Control documentation and reviews for implementation and security updates- System Security Risk Monitoring and reporting- Centralized POA&M documentation and management including creating, tracking, andtimely closure and artifact inventory documentation and reporting.- Supporting Threat and Vulnerability Analysis, documentation, and reporting

Maryland, United States

- Lead FISMA Risk Management and System Security Monitoring, System Audit Engineering and log analysis based on NIST compliance requirements. - Lead CSAM tool administration, IT security control assessment, technical documentation, and management, on the status of IT security risk assessments and implementation of NIST developed IT security control standards and policies.- System Security Monitoring and status reporting- Using CSAM as a centralized tool for POA&M management including creating, tracking, and timely closing, as well as automating system inventory and FISMA reporting capabilities.Conducting the RMF process to categorize system, select and implement appropriate controls for system security against CIA.- Supporting and reporting on Contingency Planning and Disaster Recovery process.- Supporting Nessus vulnerability log analysis and reporting on threats and associated impacts for proper control management to leverage system security.- Supporting data sharing procedures and Interconnection Security Agreement documentation.

Maine, United States

Acting as the main system data security analyst for a new project to ensure compliance with NIST Standards. - Leading a team of security personnel in CSAM) tool IT security assessment, documentation, management, and reporting on the status of IT security risk assessments and implementation of NIST developed IT security control standards and policies.- Using CSAM as a centralized tool for the management of POA&M including creating, tracking, and closing, as well as automating system inventory and FISMA reporting capabilities.Conducting the RMF process to categorize system, select and implement appropriate controls for system security against CIA.- Using System/Network scans and other vulnerability tools and generating reports as part of risk assessment process to identify system vulnerabilities, threats, and associated impacts to effect proper controls and ensure system security.- Assist system programmer in designing data governance procedures for system- Engaging data sharing partners in data field definition and efficient system security discussions

Washington Dc-Baltimore Area

Using and analyzing vulnerability scanners such as IBM AppScan, Saint, and Tenable Security among others to ensure network and application security.- Led a team in HIPAA Compliant Cloud Service Patient Data Security in New York- Assisted in establishing a HIPAA disaster recovery/contingency plan for new Patient Data machine in New York.- Team Member in HIPAA Compliant system categorization in Baltimore- Auditing system security installations to ensure the Confidentiality, Integrity. and Availability (CIA) of system and compliance. - Conducting continuous system monitoring to avoid potential future vulnerabilities and threats.- Using UTM methods such as IDS/IPS to help analyze DMZ Firewall configurations for effective system security and ensuring control effectiveness.- Develop System Security Plans (SSP) to provide an overview of system security requirements and describe the controls in place or planned by information system owners to meet those requirements.- Conduct IT risk assessment to identify system threats, vulnerabilities, and risks.- Drafting Contingency Plan recommendations for system owners - Provide expert technical security guidance on IT projects such as deployment of new systems, major system upgrade, and system migration.

Washington Dc-Baltimore Area

Assist the Senior Information Security Officer in the conduct of Information. Security assurance roles and ensuring system safety. - Developed a security baseline controls and test plan that was used to assess. implemented security controls.- Conducted security control assessments to assess the adequacy of management, operational privacy, and technical security controls implemented. Security Assessment Reports (SAR) were developed detailing the results of the assessment along with Plan of Action and Milestones (POA&M)- Assisted in the development of rules of engagement documentation to facilitate the scanning of FRTIB network, applications, and databases for vulnerabilities- Developed Risk Assessment Reports (RARs) that addressed identified system. threats and vulnerabilities and recommending timely appropriate and actionable. solutions to ensure information safety. Assisted in the development of Privacy Threshold Analysis (PTA), and Privacy Impact Analysis (PIA).

Master’S Degree, International Law And Legal Studies, A

International Law, War Crimes and Crimes Against Humanity, International Conventions and Treaties, Global Justice and Peace Models.

Bachelor Of Arts, Law & Economics, B+