Troy Pickens (Cissp-Issmp, Issep) Email & Phone Number

Implemented NIST 800-53 Revision 5 security requirements for Defense Information Systems Networks, working collaboratively with DISA personnel to achieve compliance and enhance overall network security. Utilized cutting-edge tools and techniques to detect and mitigate potential breaches, while also staying up-to-date with current and emerging threats through close collaboration with key stakeholders.Spearheaded initiatives aimed at aligning the enterprise with NIST's Cybersecurity Framework and DoD's DESMF. Developed practical strategies for achieving desired outcomes through consultation with executives, senior technicians, and subject matter experts, all while adhering to strict project timelines and resource constraints.

Sterling, Virginia, United States

Provided strategic direction and oversight in developing cybersecurity policies for both new and established systems across FBI's network. Leveraged subject matter expertise and industry best practices to ensure alignment with compliance standards and minimized potential risks.Collaborated closely with cross-functional teams throughout the agency, including program managers, engineers, auditors, and other ISSOs, to implement effective risk mitigation strategies. Regularly reviewed system architecture designs, change requests, and incident reports to identify areas requiring heightened attention or remediation efforts.

Washington D.C. Metro Area

Served as the primary ISSO responsible for securing the End User Devices boundary (EUD-GSS), comprising five interconnected sub-systems supporting approximately 4,500 users, which represents the most critical segment of the organization’s IT infrastructure. Implemented robust safeguards and operational measures aligned with NIST guidelines to minimize inherent risks. Collaborated frequently with key stakeholders, such as the SO and AO, to maintain awareness of emerging threats and vulnerabilities and optimize response capabilities accordingly.Managed continuous monitoring activities for several high-risk external service offerings, including FedRAMP-certified and non-FedRAMP solutions. Designed comprehensive reporting mechanisms utilizing NIST standards to facilitate ongoing monitoring of these critical assets, enabling proactive identification and mitigation of issues before they escalate into major incidents.Developed extensive system documentation in line with the NIST RMF framework, contributing significantly to the Information System Continuous Monitoring and Ongoing Authorization programs. These documents provided clear guidance to relevant parties regarding system configuration, operations, and maintenance practices, thereby promoting compliance and enhancing overall security posture.Regularly briefed executive leadership, including AOs and SOs, about the risk profiles associated with various components of the portfolio under my care, highlighting trends, challenges, and opportunities for improvement. In addition, monitored developments relating to new technologies, regulatory updates, and evolving best practices, sharing insights and recommendations with team members and stakeholders as appropriate.

Sterling, Va

Led FedRAMP authorizations, compliance assessments, and continuous monitoring efforts across multiple cloud environments as a member of a Third-Party Assessment Organization (3PAO), following FedRAMP PMO requirements and NIST SP 800-53A Revision 4 guidelines. Coordinated closely with DevOps, Operations, Networking, and Compliance teams throughout the software development life cycle (SDLC) and delivered timely results in accordance with agency deadlines. Obtained favorable Agency Authority-To-Operate (ATO) awards for clients operating on both commercially available and government-owned infrastructure platforms.Executed rigorous policy and procedure examination processes by interviewing personnel, testing systems, examining documentation, and evaluating evidence to confirm adherence to NIST SP 800-53A mandates. Utilized the Risk Management Framework (RMF) methodology to validate Information System Security Plans (ISSP) and mitigate risks identified during the assessment phase. Developed thorough Security Assessment Plans (SAPs) and related documentation that met or exceeded all applicable requirements.Provided detailed report summaries outlining significant findings and recommended improvements to address any deficiencies discovered. Worked collaboratively with customers to develop actionable remediation strategies, while maintaining open lines of communication regarding progress towards resolution. Ensured all necessary documentation was maintained accurately, efficiently, completely, and accessibly according to organizational protocols.

Johnstown, Pennsylvania

Oversaw the classified information systems security for both Johnstown, PA and Largo, FL facilities, implementing robust policies and procedures to maintain compliance with Defense Security Service (DSS) requirements.Successfully completed the Authorization To Operate (ATO) process for six distinct System Security Plans, spanning the entirety of each plan's lifecycle, from conception through final authorization.Enforced Defense Security Service (DSS) standards for Security Risk Management in accordance with the National Industrial Security Program Operating Manual (NISP-OM) and Office of the Designated Approving Authority (ODAA) Process Manual.Managed a legacy XP system under a Customer Acknowledgement of Risk (AOR) status with associated Plan of Action and Milestones (POA&M) necessities during the Certification and Accreditation cycle.Formulated a company-wide uniform methodology for submitting RMF packets to be approved by DSS.

Johnstown, Pennsylvania Area

Regularly conducted System Audits via Nessus Scans, STIG Viewer evaluations, Event Log reviews, Active Virus updates, and System Patches, along with periodic Self-Inspections (quarterly).Played a crucial role in Security Engineering for Controlled Cryptographic Items (CCIs) for DoD contracts by ensuring conformity with relevant laws governing handling and examination of such devices.As COMSEC custodian, successfully secured and preserved confidential materials against all forms of unapproved access attempts, earning a flawless track record in this regard.Organized and supervised new staff member security orientations and briefings.

2000 Navy Pentagon, Washington, Dc 20350

Provided Senior Level Executives with Information Technology experience, support, and training.Developed and presented a widely recognized daily intelligence report used by top naval officials to inform crucial decisions, delivering actionable insights based on comprehensive analysis of complex data sets.Played a pivotal role in developing and implementing a successful training program for junior US Navy Information System Technician personnel, fostering a culture of cybersecurity awareness among staff members and preparing them to navigate evolving technological landscapes with confidence.Demonstrated exceptional leadership skills while managing a team of twelve junior enlisted personnel, consistently exceeding performance expectations and promoting a positive work environment characterized by collaboration, innovation, and professional development.

Uss Curtis Wilbur - Yokosuka, Japan

Led a team of IT specialists dedicated to supporting critical shipboard communications networks running under NIPR and SIPR classifications, using satellite and line-of-site connectivity options to guarantee minimal downtime and seamless operations.Meticulously executed Information Assurance Vulnerability Management (IAVM) duties by carrying out consistent surveillance and updating measures, thereby upholding stringent cybersecurity norms and protocols throughout the entire system lifecycle.Distinguished self as an authority in diverse domains such as Command, Control, Communications, Computers, Intelligence (C4I), networking, National Institute of Standards and Technology (NIST) Special Publication 800-53, Extremely High Frequency (EHF) radiofrequency spectrum, Space and Near Space Communications Systems (SNSCS), and Next Generation Transportable Communication Systems Security Technical Implementation Guide (NTCSS). Provided expert instruction to junior staff in these subject matters, empowering them with valuable knowledge and skills required to thrive in today's ever-evolving digital landscape.Spearheaded the implementation of Intrusion Detection Systems (IDS) and endpoint monitoring tools, coupled with appropriate policies and procedures, significantly lessening risks related to information breaches or tampering.

Uss Duluth - San Diego, Ca

Oversaw all aspects of network infrastructure management, spearheaded initiatives aimed at enhancing efficiency and resiliency, and facilitated cross-functional collaboration between IT departments and end-users to deliver optimal levels of customer service.Successfully led a major initiative to migrate mission-critical networks to Windows Server 2003, integrating advanced identity and access management techniques to maintain the highest standards of security and regulatory compliance.Prepared rigorous certification and accreditation documents for both SIPR and NIPR networks operating aboard military vessels, demonstrating proficiency in risk assessment methodologies, policy creation, and operational planning processes.

Bachelor'S Degree, Finance

Activities and Societies: Investing ClubFocus on Real Estate Development and Real Estate Finance

Executive Masters Of Buisness Administration, Emba

The Executive MBA arms professionals with an MBA education that adds more advanced courses in leadership, management, strategy, corporate.

Computer Science, Aerospace Engineering