SUMMARY:

• Six years experience serving in FISMA and Information Technology and Cyber Security compliance and Information Assurance. Familiar with Cloud, FedRAMP, Privacy, NIST 800 - 18, NIST 800-37, NIST-800-53 Rev4, C&A/A&A.
• Fifteen years experience interviewing subject matter experts (system architects and engineers, database administrators, analysts, senior economists, auditors, advisors, inspectors general, investigators, physicians, and biostatisticians) and analyzing legacy documents to compile requisite information for production of printed and online publications.
• Twelve years experience applying System Development Lifecycle (SDLC) methodologies to develop and maintain project management plans, define and scope documentation requirements, develop and manage document delivery schedules.

TECHNICAL SKILLS:

• Administrator Guides
• Plans of Actions and Milestones (POA&Ms)
• Application Programming Interface (API) Guides
• Policy and Procedure Guides
• Contingency Plans
• Press Releases
• Continuity of Operations Plans (COOP)
• Project Plans
• Database Entity Relationship Models
• Quality Control Monitoring Policy Procedures
• Disaster Recovery Plans (DRP)
• Release Notes
• Functional Requirement Specifications
• Security Assessment Reports (SAR)
• HTML and Web Online Help Systems
• System Security Boundary Diagrams
• Installation and Configuration Guides
• System Flow Diagrams
• Instructional Courseware (Instructor and Learner)
• System Security Plans (SSP)
• Intranet and Internet Websites
• System Test Plans
• Marketing Brochures
• System Use Cases
• Memoranda of Agreement/Understanding
• User Manuals
• Online Tutorials
• Web-based Forms and Surveys
• Adobe Acrobat eHelp RoboHelp
• MS Project
• Adobe Captivate
• MadCap Flare
• MS SharePoint Designer
• Adobe FrameMaker
• MS Office Professional Suite (MOS Certified)
• MS Visio
• Adobe LiveCycle Designer
• TechSmith Camtasia Studio

PROFESSIONAL EXPERIENCE:

Confidential, Washington, DC

Administration Contractor

• Create and maintain the security documentation for certification and accreditation of 7 FISMA-reportable systems.
• Interview software vendors and System Owners to document SSP, Contingency Plans, and Disaster Recovery Plans.
• Write and remediate POA&Ms.
• Review and manage system vulnerability scans (NESSUS) and system WebInspect scans.

Confidential, Washington, DC

CSAM Administrator/Cyber Security Analyst

• Review artifacts of 270 FISMA-reportable systems to verify compliance with Federal information security protocols and policies (specifically NIST 800-18, NIST 800-37, and NIST 800-53 standards).
• Initiated, designed, and deliverer weekly instructor-led Cyber Security and Risk Management Framework training to ISSOs, AOs, Assessors, and other IT professionals. (Rotate through 14 bureaus, one bureau per week.) Wrote supporting instructional courseware and standard operating procedures (SOPs).
• Designed and delivered NIST 800-53 Appendix-J training to Bureau Privacy Chiefs.
• Initiated and assisted in the development of enterprise-level Common Control Program. Wrote implementation statements.
• Initiated, designed, compile, and publish a monthly briefing book for the Secretary and other Department Executives to report on the effectiveness of information security policies and practices during the previous month and fiscal quarter.
• Provide helpdesk, maintenance, and application training for CSAM (Cyber Security Assessment and Management) as CSAM Administrator for the Department of Commerce, Office of the Secretary, Office of the Chief Information Officer, Office of Cyber Security.
• Wrote, formatted, and published (online help and booklet) the Cyber Security Assessment and Management POA&M Desk Reference—an exhaustive user’s guide to Federal and Departmental policies, guidelines, and procedures for the entire lifecycle of POA&M management within NIST Risk Management Framework (RMF).
• Designed developed and maintained Departmental MAX Portal (OMB) website. Managed web content.

Confidential, Washington, DC

Information Assurance Analyst/Senior Technical Writer

• Provided information assurance and technical writing support in development of federal IT security plans (System Security Plans, Contingency Plans, Security Categorization Forms, Privacy Impact Assessments, Disaster Recovery Plans, etc.).
• Provided technical writing support and assistance in conducting Annual Control Assessments and related Certifications and Accreditations for Information Assurance.
• Provided technical writing support in response to FISMA and other IT security-related data calls.

Confidential, Washington, DC

Business Analyst/Senior Technical Writer

• Wrote, edited, and published a comprehensive Policy and Procedure manual in multiple media: online PDF; the intranet/SharePoint; and hardcopy.
• Interviewed House staff to compile requisite information for production of printed and online publications.
• Documented policies and procedures for quality control monitoring program to provide management with reasonable assurance that peer reviews are performed and reported in accordance with professional standards.

Confidential, Washington, DC

Senior Business Analyst/Senior Technical Writer

• Wrote system documents and generated reports to support collection, processing, analysis, and monthly dissemination of statistical data to the U.S. Congress and other Federal, State and local government agencies.
• Interviewed economists, Oracle database developers, system engineers, and other subject matter experts to compile requisite information for production of printed and online publications.
• Developed and maintained project management plans and maintained project development website. Managed web content.
• Created system integration test plans. Conducted integration testing on proprietary software applications. Created macros, document templates, and style guides.