Information System Security Officer
Current● Developed and implemented risk management strategies to protectinformation and information systems● Ensured compliance with regulatory and non-regulatory securityrequirements including Department of Energy Binding Directives● Enforced information security policies and educated end-users on propersecurity practices● Conducted security and risk assessments using security frameworks such asNIST, RMF, and Common Criteria● Mitigated risks by implementing security controls and testing andevaluating security products● Ensured privacy of data throughout its lifecycle and manage vulnerabilityassessments● Maintained business continuity and disaster recovery plans● Coached and reviewed the work of lower-level technical staff● Communicated with internal and client IT/Cyber project team members andinfluenced team members regarding solution design and process