Sean Christopher Email & Phone Number

Milwaukee, Wi, Us

Dublin 2, Ie

Dublin 2, Ie

Reston, Virginia, Us

• Performed cybersecurity audits of Leidos programs storing/processing customer data. Audits were against CMMC requirements. Responsible for determining program applicability, scheduling, and conducting audits. • Developed and implemented a process for performing annual reviews of Leidos programs to determine applicable cybersecurity requirements. • In support of Leidos’ Dynetics acquisition, performed a gap analysis to determine compliance with Leidos’ corporate cybersecurity requirements.• Reviewed and supported development of Leidos’ corporate SSP.

Rockville, Md, Us

• Served as lead of the HRSA Risk Management Team, which consists of two federal employees and five contractors.• Prepared and reviewed authorization packages prior to review by Authorizing Official. • Developed a process for reviewing scan results and tracking open scan findings on individual system POA&Ms. • Coordinated with System Owners and Information System Security Officers (ISSOs) to ensure compliance with FISMA requirements.• Subject Matter Expert for the RSA Archer and Trusted Agent GRC tools.• Subject Matter Expert for NIST 800 Series documents. Reviewed all NIST 800 series documents to determine their applicability to the HRSA environment and adapted HRSA processes to implement accordingly.• Led the HRSA Security Assessment and Authorization project. The mission of the project was to develop consistent, repeatable processes for systems obtaining an Authorization to Operate (ATO). Deliverables included identification of common control providers and corresponding common control catalogs, System Security Plan guidance documentation, and a control responsibility matrix.• Led the HRSA Archer implementation project. This project was an HHS-wide initiative to implement Archer as a replacement for Trusted Agent GRC. Role consisted of identifying requirements, performing testing, supporting data migration, and providing user training.• Developed the Security Performance Dashboard. The Security Performance Dashboard translated raw compliance and operational data into meaningful dashboards that could measure a system’s security effectiveness in a manner that was easily understandable for ISSOs, System Owners, and other HRSA management.

Herndon, Va, Us

• Performed security control assessments of multiple system types (general support systems, applications, etc.). Assessment scope ranged from low, moderate, and high systems and included both annual and full assessments.• Provided remediation recommendations for assessment findings. As part of the assessment Outbrief, identified findings’ severity and recommended remediation priority.• Tracked and managed weaknesses across organization. Reviewed all weaknesses prior to closure to ensure finding was remediated, evidence submitted was sufficient, and weakness was properly documented.

• Provided oversight for the remediation of penetration test findings.• Contributed to development and oversight of the NIH Ongoing Authorization program. • Offered Trusted Agent FISMA support and administration.• Integrated Risk Management Framework (RMF) into NIH processes.

Reston, Va, Us

• Received award from TSA CISO for contributions to the CDM program.• Provided oversight for 15 systems.o Analyzed monthly continuous monitoring scans (Nessus/Tenable)o Tracked compliance with FISMA requirements (SA&A documentation, POA&M management, etc.)• Created and updated parsing tool utilized by the CDM team.• Developed management scan scorecards (vulnerabilities identified and scan quality). • Prepared FISMA compliance reports for management.

• Performed TAF administrative duties (account/system creation, deletion, management).• Provided SA&A/RMF support to NIH customers. • Validated TAF system information.• Managed vulnerability to POA&M weakness process.

Falls Church, Va, Us

• Security Testing and Evaluation (ST&E) of SRA-Network o Tested SRA-Network against NIST 800-53A rev 1 test objectives.o Produced Security Assessment Report.• Security Compliance Team Member o Completed ATO certification package.o Led management of POA&M.o Led development of configuration management program.

Reformatted computers and reinstalled all software.Website updatesInventory management