Vondalea G. Email & Phone Number

Damascus, MD, US

Sunnyvale, California, United States

• Define light-weight processes addressing SOC2, FedRAMP, and SOX compliance requirements by partnering across the organization.
• Manage, lead, and assist with FedRAMP, SOC2, SOX, and PCI compliance audits.
• Perform Gap Analysis against compliance standards and internal audits while managing remediation efforts.
• Collaborate with third-party external auditing organizations for scheduled audits, including audit planning and coordination across business units.
• Achieve desired certifications by working with internal product teams to implement processes/controls.
• Enhance operational effectiveness by utilizing innovative ideas and tools.

Beltsville, Maryland

• Supported formation of Governance, Risk, and Compliance programs for foreign partner allies.
• Defined and authored enterprise security policies/procedures in accordance with NIST Risk Management Framework with a focus on Continuous Monitoring, Auditing, and Incident Response capabilities.
• Optimized Governance, Risk, and Compliance programs while serving as Subject Matter Expert (SME) to advise U.S. Government allies and partners.

Bethesda, Maryland

• Managed multiple security frameworks and standards within Virtustream public and private cloud environments to ensure adherence to compliance requirements.
• Led implementation of FedRAMP, NIST, DoD, ISO, and SSAE implementation of required security controls within the system architecture.
• Documented, tracked, and remediated Plan of Action and Milestones for security deficiencies.
• Developed and mentored junior staff while clearly articulating compliance requirements.
• Oversaw policies, procedures, and required documentation sets for multiple security frameworks.
• Created and maintained NIST, FedRAMP and CUI Systems Security Plans (SSPs).

Rockville, Maryland

• Provided expert security consultation for the Center of Devices and Radiological Health (CDRH) on the overall establishment and management of system/application security, architecture, and policy.
• Managed vulnerabilities/threats to FDA’s Center for Devices and Radiological Health information systems.
• Conducted security review, analysis, and risk guidance for existing FDA systems and those under development to ensure application security.
• Reviewed, approved, or denied proposed mitigations, security waivers, and security requests.
• Oversaw approval of privileged user account access requests for all CDRH servers, including local administrative rights for developers.
• Ensured CDRH missions were met with appropriate IT strategies and deadlines in collaboration with functional teams.

Bs Information Technology, Security, Information Security

Activities and Societies: Dean's list

Coursework - Masters Cyber Security Program, 4.0