Seyigbena Imelda Goito Email & Phone Number

Largo, Maryland, United States

• Create and update the following documentation: Risk Assessment Report, E-Authentication, Security Assessment Plan (SAP), System Security Plan (SSP), Plan of Action & Milestone (POA&M) etc.• Facilitate the Information Risk Management process including the reporting/oversight of treatment efforts to remediate negative findings.• Develop and publish Security Policies and Standards; provide consulting to technical resources on security mitigation of identified security gaps/risks and compliance to Global Security Policies.• Define the Vulnerability Management process including the identification of vulnerabilities, provide consulting to business/technical resources to remediate vulnerabilities, and align vulnerability remediation processes with existing Infrastructure programs.• Review policies, procedures, standards, and guidelines per applicable regulations including ISO 27001, PCI-DSS, HIPAA, HITRUST.• Ensure compliance of Information Technology Security Policies and utilize vulnerability tools• Develop and enhance an information security framework based on NIST Cybersecurity Framework (CSF) and International Organization for Standardization (ISO 27001)

Fall Church

• Reviewed A&A Packages to ensure they remain current and security operations are in compliance with NIST 800-53 standards, HIPAA, FISMA and organization's policies and procedures.• Assisted in developing, defining and maintaining HIPAA information security policies, standards and procedures relating to Management, Operational and Technical controls.• Developed and maintained incident response protocols to mitigate damage and liability during security breaches.• Designed company-wide policies to bring operations in line with Center for Internet Security (CIS) standards.• Reviewed violations of computer security procedures and developed mitigation plans.• Monitored computer virus reports to determine when to update virus protection systems.• Managed relationships with third-party intrusion detection system providers.• Spearheaded bring-your-own-device program, defining necessary security parameters and designing complementary security deployments.