Ty Ford Email & Phone Number

• Authored and maintained comprehensive risk assessment reports and documentation, providing clear and actionable insights to senior management and stakeholders for informed decision-making.• Conducted regular security awareness training sessions for employees, improving organizational resilience by increasing awareness of potential security threats and best practices.• Managed third-party risk assessments and vendor security evaluations, ensuring that external partners met the organization’s security requirements and standards.

Remote

• Adhered to the NIST Risk Management Framework (RMF) to support the A&A process, including analyzing the development of supporting policies, procedures, and plans, designing, and implementing security controls, testing, and validating security controls, and analyzing and tracking corrective action plans.• Performed ongoing continuous monitoring (ISCM) using NIST 800-137 Rev 1 as a guide.• Provided security control assessor (SCA) services, such as assisting with the Assessment and Authorization process, including• Conducted assessment of the security and privacy controls implemented by an information system officer to determine the overall effectiveness of the controls and the vulnerability state of components, applications and databases residing within the system boundary.• Assess, manage, prioritize, and appropriately communicate and escalate risks, issues and remediation arising from data protection impact assessments (DPIAs).

Philadelphia, Pennsylvania, United States

• Managed all operational aspects of the business, including budgeting, payroll, and financial reporting, ensuring compliance with local, state, and federal regulations.• Developed and enforced policies and procedures to ensure compliance with local, state, and federal regulations.• Conducted regular audits and training sessions to maintain high standards of operational excellence and compliance.• Developed and enforced company policies and procedures, focusing on quality control and regulatory compliance.