Information Technology Security Analyst

• Jun 2020 - Present

Security Assessment Analyst

• May 2018 - May 2020

• Develop, review and update Information Security System Policies, System Security Plans • Coordinate and manage team activities during assessment engagements • Establish schedules and deadlines for assessment activities • Hold kick-off meetings with CISO and systems stakeholders prior to assessment engagements. • Prepare and submit Security Assessment Plan (SAP) to CISO for approval • Develop and update security plan, plan of action and milestone (POA&M) • Monitor controls post authorization to ensure continuous compliance with the security requirements • Manage vulnerabilities with the aid of Retina, and Nessus vulnerability Scanners to detect potential risks on a single or multiple assets across the enterprise network • Prepared and reviewed documentation to include SSP, SAP, SAR, POAM Packages • Create reports detailing the identified vulnerabilities and the steps taken to remediate them • Reviewed and updated some of the Artifacts especially FIPS 199, Initial Risk Assessment, e-Authentication, PTA, PIA, SAR, POAM • Developed, evaluate and implemented information security governance processes, including policies, standards, procedures and risk management practices • Implemented governance frameworks and security risk management processes, such as NIST, ISO, OMB guidelines and standards Show less

Information System Technician

• Mar 2017 - Apr 2018

• Provide first point of contact for support issues • Research and resolve technical issues, maintain technical aptitude and support corporate initiatives and team department goals according to direction of management • Interact with users to provide and process information in response to problems, inquiries, concerns and/or requests • Collaborate with customers to resolve application, phone, printer, or computer problems in real time • Works closely with clients and staffs to ensure smooth, uninterrupted operation of network client workstations, servers, and all related peripherals • Perform scheduled software and hardware installations to workstations Show less