Vondalea G. Email & Phone Number

Damascus, Md, Us

Sunnyvale, California, United States

• Define light-weight processes addressing SOC2, FedRAMP, and SOX compliance requirements by partnering across the organization. • Manage, lead, and assist with FedRAMP, SOC2, SOX, and PCI compliance audits.• Perform Gap Analysis against compliance standards and internal audits while managing remediation efforts.• Collaborate with third-party external auditing organizations for scheduled audits, including audit planning and coordination across business units. • Achieve desired certifications by working with internal product teams to implement processes/controls.• Enhance operational effectiveness by utilizing innovative ideas and tools.• Improve business practices, processes, and controls through evaluation, recommendations, and automation.• Provide policy management, including developing/updating documents and translating compliance requirements into implementable policies and procedures. • Ensure full life-cycle and end-to-end view spanning policies, processes, controls, and evidence in collaboration with internal teams.• Identify and address potential risks by reviewing business processes. • Serve as a consultant and liaison between product teams and audit leads. • Effectively interpret/translate audit controls and evidence criteria for internal product teams and stakeholders, including external auditors. • Assist with training new team members and create documented processes.

Beltsville, Maryland

• Supported formation of Governance, Risk, and Compliance programs for foreign partner allies.• Defined and authored enterprise security policies/procedures in accordance with NIST Risk Management Framework with a focus on Continuous Monitoring, Auditing, and Incident Response capabilities.• Optimized Governance, Risk, and Compliance programs while serving as Subject Matter Expert (SME) to advise U.S. Government allies and partners.

Bethesda, Maryland

• Managed multiple security frameworks and standards within Virtustream public and private cloud environments to ensure adherence to compliance requirements.• Led implementation of FedRAMP, NIST, DoD, ISO, and SSAE implementation of required security controls within the system architecture.• Documented, tracked, and remediated Plan of Action and Milestones for security deficiencies. • Developed and mentored junior staff while clearly articulating compliance requirements.• Oversaw policies, procedures, and required documentation sets for multiple security frameworks.• Created and maintained NIST, FedRAMP and CUI Systems Security Plans (SSPs).• Coordinated audit-related tasks to ensure readiness of business units for audit testing and facilitated timely resolution of audit issues or control gaps.

Rockville, Maryland

• Provided expert security consultation for the Center of Devices and Radiological Health (CDRH) on the overall establishment and management of system/application security, architecture, and policy.• Managed vulnerabilities/threats to FDA’s Center for Devices and Radiological Health information systems.• Conducted security review, analysis, and risk guidance for existing FDA systems and those under development to ensure application security.• Reviewed, approved, or denied proposed mitigations, security waivers, and security requests.• Oversaw approval of privileged user account access requests for all CDRH servers, including local administrative rights for developers.• Ensured CDRH missions were met with appropriate IT strategies and deadlines in collaboration with functional teams.

Bs Information Technology, Security, Information Security

Activities and Societies: Dean's list

Coursework - Masters Cyber Security Program, 4.0