| Candidate Information | | Title | Team Lead System Security | | Target Location | US-MD-Cheverly |
| | 20,000+ Fresh Resumes Monthly | |
|
|
| |
Click here or scroll down to respond to this candidateTechnical Experience and KnowledgeExtensive knowledge of National Institute of Technology (NIST) Special Publications (SP) including SP Street Address -53, Rev. 4 and Rev. 5; SP 800-53A, Rev. 4; SP 800-60 Volume II, Rev. 1, SP 800-37, SP 800-34, Rev. 1Extensive experience in developing Security Authorization documents to ensure compliance with Federal Information Management Act (FISMA), OMB Circular A-130, and DOT and FAA orders and policiesProficient in using the Department of Justice (DoJ) assessment tool, the Cyber Security Asset Management (CSAM) tool to perform assessments, update System Security Plans, tailoring and inheriting controls, and managing Plan of Action and Milestone (POA&M) itemsExtensive knowledge of Federal Information Processing Standards (FIPS) publications and categorizing IT systems for confidentiality, integrity, and availabilityExperience in developing privacy documentation in support of the Privacy Act of 1974 and DOT and FAA Privacy policiesExpert in Microsoft Office SuiteProficient in developing technical documentation including technical architecture diagrams using VisioSecurity Clearance:Level: Public Trust, Issuing Organization: FAAEducation:James Madison University, September 1985 May 1989, Bachelor of Arts, May 1989Work ExperienceSelf employed January 2023 December 2023Technical editing of user manuals, marketing materials, and social media content.Business Integra November 2022 to December 2022Job Description: Proposal Writer and Technical EditorWrote Standard Operating Procedures for Policy and Waivers work.Trained employee who was transitioning into my position.Assisted with editing proposal in response to RFQ.Other duties as assigned.Business Integra/Federal Aviation Administration May 2020 November 2022Washington, DCJob Description: IT Security Policy Analyst, and Security Consultant for the Federal Aviation Administration (FAA) Security Governance Division, Policy, Training, & Customer Liaison Branch.Develop and manage security policy waivers to submit to various organizations at the FAA for review, approval, and concurrence. Waivers process includes research of systems, customer outreach, and analyzing security documents to provide details about the security risk of granting the waiver.Present completed waiver documents to the Chief Information Security Officer (CISO) and Deputy CISO and provide recommendation for approving or disapproving waivers.Support the FAA governance and policy team in writing and editing security policy documents including policies and other governance documents include FAA Order 1370.121, as amended, FAA Information Security and Privacy Program & Policy, and the FAA Supply Chain Risk Management Plan.Provide Subject Matter Expert (SME) support to security team including providing extensive knowledge for the FAA environment, infrastructure, and systems. The FAA hosting environments include both on-prem data centers as well as FAA-specific cloud environments (AWS and Azure).Business Integra/Federal Aviation Administration November 2014 May 2020Job Description: IT Security Assessment Team Lead in support of the FAA Office of Information Security & Privacy (IS&P)Serve as Team Lead and provide mentorship and training to junior assessors and assessment coordinatorsManage Quality Control team member to ensure accurate and complete security assessment deliverablesAct as Subject Matter Expert (SME) for FAA assessment processes, business missions, system information, and other organizational informationPerform Security Assessments as Lead IT Assessor of FAA IT systems using NIST SP 800-53, Revision 4 controls, including assessments of General Support Systems (GSS)Identify vulnerabilities, perform vulnerability assessment, and write recommendations to create Plan of Action and Milestone (POA&M) itemsDevelop System Security Plans (SSPs) in support of Security AssessmentsDevelop Security Authorization documents to ensure compliance with Federal Information Management Act (FISMA), OMB Circular A-130, and DOT and FAA orders and policiesDeveloped security documentation for the FAA to ensure compliance with Federal Information Management Act (FISMA), OMB Circular A-130, and DOT and FAA orders and policies including System Security Plans (SSPs) and System Characterizations for multiple initial systems including FAA Cloud Services (FCS) MAC and AWS IaaS, M365, Huddle SaaS, Continuous Diagnostics Monitoring (CDM) system, the ASKME suite of applications, and the Unmanned Aircraft System (UAS).Updated all documentation and assessed more than 70 systems at the FAA.Provided guidance to FAA on security templates and other security documentation templates.Develop Information System Contingency Plans (ISCP) in support of Disaster Recovery (DR) activitiesVMD Systems Integrators/Federal Aviation Administration June 2011 October 2014Washington, DCJob Description: IT Security Assessor and Project Control Analyst (PCA) in support of the Federal Aviation Administration (FAA) Office of Aviation Safety (AVS)IT Security Assessor: September 2012 October 2014Perform Security Assessments as Lead IT Assessor of FAA IT systems using NIST SP 800-53, Revision 3 controls as described above.Project Control Analyst (PCA): June 2011 September 2012Technical Writer and Assessment Team Support for Federal Aviation Administration (FAA) Office of Aviation Safety (AVS)Includes additional duties as Technical Writer/Quality Assurance (QA) position identified under Cashwell LLCCashwell LLC/Federal Aviation Administration Washington, DC April 2009 June 2011Technical Writer/Quality Assurance (QA)Job Description: Technical Writer and Assessment Team Support of the Federal Aviation Administration (FAA) Office of Aviation Safety (AVS)Participate in Security Authorizations in support for Assessment Team of FAA IT systemsAssist IT Assessor with identifying vulnerabilities, performing vulnerability assessment, and writing recommendations to create Plan of Action and Milestone (POA&M) itemsPerform Quality Assurance for Security Authorization documents to ensure compliance with Federal Information Management Act (FISMA), OMB 300, and DOT and FAA orders and policiesDevelop annually AVS-specific FAA Authorization document templates based on the FAA Security Authorization HandbookLiaison with Privacy Office to complete and request approval of Privacy Threshold Analysis (PTA) and Privacy Impact Assessment (PIA) documentsReview and produce Security Authorization Packages for submittal to Information System Security Manager (ISSM) and the FAA Office of Information Security (AIS)Coordinate production schedule for more than 40 systems for FY2009 FAA AVS annual assessment activities, including managing subcontractorFreelance Work/Volunteer Work February 2004 April 2009Job Description: Provided copy writing, editing and design services to various clients.Edit quarterly newsletter for cultural society using Microsoft Word and Adobe PageMakerWrite press releases, information sheets and brochures using Microsoft Word and Adobe PageMakerEdit and maintain Web site for speech pathology clinic using Hypertext Markup Language (HTML)Create and design various flyers for charity and fund-raising events using Microsoft Word, Adobe PageMaker and Photoshop CSVolunteer Work: Volunteered in the Prince Georges County public schools.Worked with regional superintendent to change local school administration to improve school conditionsIncreased PTA membership using social media and marketing; served as PTA president and VPOrganized several successful activity-based fund raisers per school yearESI International, Arlington, VA November 2000 February 2004Relevant Work Performed: Marketing Communications Copywriter/Newsletter EditorWrote marketing copy for all marketing materials e.g, direct mail pieces, white papers, advertising, marketing packages, and press releasesEdited and wrote articles for monthly project management newsletterManaged independent project managers for submission to monthly newsletterPrepared newsletter both in print and onlineThe McGraw-Hill CompaniesAviation Week Group, Washington, DC April 1994 November 2000Summary: Managed product marketing and print marketing activities for World Aviation Directory and Overhaul & Maintenance magazine for this large publishing firm.Job Titles:Marketing Manager, Electronic Products: April 1998 - November 2000Assistant Manager, Marketing Services: February 1995 - April 1998Marketing/Client Services Representative: September 1994 - February 1995Marketing Services Coordinator: April 1994 - September 1994Technical Writing and Marketing CopywritingTechnical User SupportManagement and SalesMedia Cybernetics, Silver Spring, MD January 1992 April 1994Title/Job Description: Marketing Coordinator and Technical Product SupportTechnical Support: Provided end-user support for a drawing application that later became MS Paint.Sales and Marketing: Wrote copy based on complex technical information from the engineering team and developed copy and marketing materials for the lay person.Deupi & Associates, Arlington, VA June 1991 January 1992Title/Job Description: Performed all relevant administrative functions as Office Manager as well as tracking budget and sales using Excel and creating fliers using Word.DeltaTech Corporation, Arlington, VA and Silver Spring, MD Nov. 1989 June 1991Title/Job Description: Marketing AssistantUniphoto Picture Agency, Washington, DC May 1989 November 1989Title/Job Description: Administrative and Marketing Assistant |
