Information Systems Security Manager
Executive Summary:
Talented Security Professional with over 20 years of military/government experience leading teams and protecting and securing classified information.
Skilled in the application of technical and physical security principles and methods to design, implement, manage and protect complex information systems. Leverages diverse technical background and expertise to ensure the confidentiality, integrity and availability of secure communication networks. An effective, versatile team player able to adapt to continuously changing requirements to achieve organizational goals. TOP SECRET SCI Cleared. DoD IAT/IAM/IASAE Level III Certified.
Extensive IT background focused in information assurance and cybersecurity applications for classified/controlled Information Systems (IS). Has performed cybersecurity assessments and compliance activities for classified programs across multiple information domains. Has provided guidance and support to the program management teams, system engineers, developers, administrators, and owners for directed/discovered changes related to information security. Has maintained IS security documentation/artifacts such as System Security Plans (SSPs), Plan of Action and Milestones (POA&M), and IS Risk Assessments). Has supported continuous monitoring (CONMON) activities to maintain a high level of IS security posture. Ensured that all Risk Management Framework (RMF) activities are fulfilled in order to achieve and maintain Authorization to Operate (ATO) for all classified IS. Has designed and coordinated technical solutions for the sustainment of cybersecurity across multiple technology areas. Has developed, reviewed, and audited Physical and Technical Security Plans and procedures to verify compliance with federal regulations and guidance utilizing standards and instructions put forth by the National Institutes of Standards and Technology (NIST), Federal Information Security Modernization Act (FISMA) and the Committee on National Security Systems (CNSS). Ensures that security considerations during DevOps is implemented and enforced early and continuously throughout the CI/CD pipeline. Coordinates with stakeholders to facilitate the clear communication of technical requirements to gain mutual approval of program/project goals. Has performed every role from analyst to engineer to manager in the information security domain in order to build a comprehensive skillset to serve as a Cybersecurity/Information Assurance Subject Matter Expert (SME).
Skills & Tools:
• Communications Security
• Information Assurance
• Federal Compliance
• Agile/Hybrid Methodologies
• Technical Security
• Risk Management Framework
• Physical & Infrastructure Security
• Project Management
• Process Improvement
Education:
B.S. Cybersecurity
Professional Certifications:
• (ISC)2 - Certified Information Systems Security Professional (CISSP)
• ISACA – Certified Information Security Manager (CISM)
• (ISC)2 – Information Systems Security Management Professional (CISSP-ISSMP)
• ITIL - Foundation v3
• PMI – Project Management Professional (PMP)
• (ISC)2 – Information Systems Security Engineering Professional (CISSP-ISSEP)
• (ISC)2 – Certified Authorization Professional (CAP)
• PMI – Agle Hybrid Project Pro
• CSA - Certificate of Cloud Security Knowledge v.4
Note: Personal information and Resume will be provided upon Recruiting Agreement.