We provide IT Staff Augmentation Services!

Information Security Consultant Resume

5.00/5 (Submit Your Rating)

Lanham, MD

PROFESSIONAL PROFILE:

  • An enthusiastic information technology for over 15 years, 18 years with the Telecommunication Industry focused in Information Technology, Finance/Accounting, Payroll, Stock Control and Procurement. Vendor Project Management, Procurement HR/Admin Support, customer service and General services for over 7 years.
  • IT security and risk management analyst with successful 4 years knowledge, project management, cybersecurity, data analytics, Risk Management Framework (RMF), information systems management, security assessment of information and information system while utilizing popular industry frameworks and standards, vulnerability management, compliance, audit and system security management in Investment Banking with focus in: internal controls compliance, customer data confidentiality, budgetary control, risk management.
  • Over 15+ years of experience as General Information Technology (IT), 18+ years with the telecommunication industry focused in Information Technology, Finance/Accounting, Payroll and Procurement.
  • Knowledge in Information Technology Infrastructure Management, Computer Engineering and Computer Science
  • Knowledge of Customer Service and customer support principles and methods.
  • Report, respond and resolve customer requests.
  • Install, configure, upgrade, and troubleshoot hardware and software components.
  • Present formal and informal and assistance to customers.
  • Knowledge of knowledge - based applications.
  • Participate in the planning and delivery of a full range of customer support services to the organization.
  • 4+ years of experience as an Information Security Analyst ensuring regulatory compliance, audit and system security management (investment banking) with focus in: Business development, internal controls compliance, customer data confidentiality, data security, PKI, database monitoring, data at rest encryption, data loss prevention, Knowledge of security issues, techniques and implications across computing platforms, directory services, budgetary control, risk management, internal audit and customer service.
  • Categorize Information Systems for a low Risk Information Application with Stakeholders.
  • Preparation of Presentations and Participate in Kick-off meetings.
  • Review and update System Security Plan (SSP).
  • Create Plan of Action and Milestones (POA&M)
  • Conduct Security Control Assessments, System Security Plan (SSP) Review, Evaluation Conduct Risk Analysis, Conduct Risk Assessments, Security Assessment Report (SAR), Risk Assessment Report (RAR), Security Assessment and Authorization, Contingency Plan Development or Evaluation
  • Prepare and submit Security Assessment Plan (SAP) for approval.
  • Develop and update Security Assessment Report (SAR).
  • Able to conduct vulnerability scans using Retina and generate vulnerability scan report.
  • Solid background in Risk Management, Security Incident Management, Security Operations and Administration, Access Control and Password Policies, Anti-malware and Anti-viral protection, Disaster recovery (DR) & Business Continuity Plan
  • Good Knowledge of best practices of security frameworks, governance and regulatory structure, industry recognized: ISO 27001/2, FIPS and NIST SP Rev 1, NIST SP Rev 4, HIPAA, FISCAM and FedRAMP. National Industrial Security Program Operating Manual ( Confidential ).
  • Knowledge of current and emerging trends in General Information Technology, Information Technology Security, Risk Security Technologies and practices including machine learning and analytics.
  • Experience in reviewing documentation such as security policies and procedures, security plans, risk assessment reports and operating procedures.
  • Applications/ Tools Used: Retina, MBSA, not limited to ACL, Wireshark, Snort, Rapid7 Nexpose, Tenable Security Center, Nessus, Nmap, SIEM, Windows firewall, Windows Active Directory, Audit (Tripwire, Intrusion Detective System (IDS) and Intrusion Protective System (IPS), Nessus, McAfee Antivirus, Kaspersky Antivirus, Norton Antivirus Snort, ESET Antivirus and ArcSight SIEM tool.
  • Proficiency in Microsoft Office Suite (Word, Excel, Power Point, Publisher and Outlook)
  • Proficiency in Microsoft Windows Vista, XP, Windows 7, Windows 8, Windows 10, WordPerfect, Lotus
  • Manage effectively the administration of Microsoft Great Plains Dynamics -Enterprise Resource Planning (ERP) System for 5 (five) years.
  • Able to conduct frequent staff on company standard operating procedure and security awareness
  • Implement effectively payroll application using Microsoft Excel
  • Project Manager for Certified Authorization Professional (CAP) Program at Cybersoft Technologies: FOREIGN AFFAIRS ANALYTICAL INFORMATION SYSTEM
  • Procurement experience and managing large enterprise and wide-complex projects
  • 3rd party vendor management: Outsource vendor to do selection for suppliers to supply 40% below market price margin, saving over 60% of the total budget.
  • Participate in major contract re-competitions resourcing, applying industry expertise to deliver quality, cost-effective service contracts, in close collaboration with Procurement team.
  • Multi-million budget management experience: Save 40% of budget on fuel/lubricants, office furniture, office equipment, civil project and project equipment
  • Frequent research of best practices and resources information technology, communication, project, and service management methods and frameworks as they relate to IT sourcing and vendor management.
  • Able to configure Virtual Machines
  • Strong understanding of Local/Wide Area Networks (LAN/WAN) and TCP/IP fundamentals
  • Working knowledge of firewall technologies
  • Troubleshoot and Maintenance of PCs and devices
  • Strong knowledge in Graphic Designing
  • Strong knowledge in command Line interface (CLI) programming
  • Adept in using Packet Tracer to configure end devices
  • Strong knowledge in Installation of software and hardware
  • Knowledge in Ethernet cabling using cabling standards
  • Setting up and installation of Printers, Copiers, Fax
  • Effectively perform both independently and collaboratively as a strong team contributor and lead.
  • Excellent verbal and written communication skills
  • Ability to adapt to change; provide quality and on-time delivery.

PROFESSIONAL EXPERIENCE:

Information Security Consultant, Lanham, MD

Confidential

Responsibilities:

  • Develop, review and update Information System Security Policies, System Security Plans (SSP), and Security Baselines in accordance with NIST SP, FIPS 199 and NIST SP Risk Management Framework (RMF) towards FISMA compliance; strengthen enterprise cybersecurity and improve regulatory compliance.
  • Apply appropriate information security control for specific clients based on NIST SP rev 1, NIST SP rev 4, NIST SP, FIPS 199, FIPS 200, and OMB A-130 Appendix III.
  • Conduct independent security analysis of specific client’s information, Information Systems, review security logs of all network devices, key applications and other risk metrics in order to identify and remediate inherent and potential cyber risk to the organization.
  • Conduct Security Control Assessments, System Security Plan (SSP) Review, Evaluation, Creation Conduct Risk Analysis, Conduct Risk Assessments, Security Assessment Report (SAR), Risk Assessment Report (RAR), Security Assessment and Authorization, Contingency Plan Development or Evaluation.
  • Perform security testing of specific client’s network firewalls, applications and operating systems by utilizing penetration and vulnerability scanning tools; analyzed threats identified by the vulnerability scanning, reporting to the client on severity, exposure, likelihood of compromise and potential consequences.

Applications/ Tools Used: Retina, MBSA, not limited to ACL, Wireshark, Snort, Rapid7 Nexpose, Tenable Security Center, Nessus, Nmap,, Windows firewall, Windows Active Directory, Audit (Tripwire, Intrusion Detective System (IDS) and Intrusion Protective System (IPS), ), Nessus, McAfee Antivirus, Kaspersky Antivirus, Norton Antivirus Snort, ESET Antivirus, ArcSight SIEM tool and FireEye. Also used Microsoft Office Suite (Word, Excel, Power Point, Publisher, Visio, Outlook and One Note) Microsoft Windows Vista, XP, Windows 7, Windows 8, Windows 10.

Confidential

Manager - General Services and IT

Responsibilities:

  • Managed General Services and IT supervisory oversight of the organization.
  • Effectively managed a team of software developers to develop an application for the organization.
  • Lead for Business development, developing new products for the organization
  • Analyzed Excel big data to be migrated into E-Sopht Banking Software
  • Conducted risk management on personal & business loan applications.
  • Applications/ Tools Used: Retina, MBSA, Windows Defender Antivirus, Kaspersky Antivirus, Norton Antivirus, MacAfee Antivirus, ESET Antivirus not limited to SIEM to Nessus, Windows firewall, Windows Active Directory, Intrusion Detective System -IDS, Intrusion Protective System-IPS. Also used Microsoft Office Suite (Word, Excel, Power Point, Publisher, Corel Draw, Visio and Outlook) Microsoft Windows Vista, XP, Windows 7, Windows 8, Windows 10.
  • Ensured staff complied with the bank’s internal controls, policies and procedures.
  • An effective backup & recovery policy & procedures was implemented.
  • Effective scanning of the network using Kaspersky Antivirus
  • Provided strategic security control recommendations for all subsidiaries and branches.
  • Evaluated and certified internal, general and specific controls that mitigate enterprise risk; ensured control implementation complies with recommended security and control requirements.
  • Planned and conducted assurance testing of information systems for security, reliability, accuracy and completeness by utilizing vulnerability scanners,
  • Facilitated bi-monthly for staff to gain an overall awareness of current malwares in circulation.
  • Established and maintained relationships with IT vendors, service providers to ensure services were delivered as contracted in the Level Agreements (SLA)
  • Guided implementation of Ideal Finance Limited IT Infrastructure by external IT service providers, establishing healthy vendor relationship standards and processes; monitoring the overall implementation and vendor performance
  • Conducted Troubleshooting and Maintenance of PCs and devices
  • Facilitated Installation of software and hardware throughout the branches
  • Conducted the Configuration and installation of Virtual Machines
  • Facilitated the installation of servers, switches and routers
  • Managed the Procurement department to contract services, approved by a Procurement Team headed by the General Manager for approval and authorize payments.
  • Negotiated for instalment payments and barter trading due to the nature of industry: investment banking
  • Engaged e2e to do selection of vendor to supply stationery and other janitor supplies at 40% reduction of wholesale price saving over 60% of the total budget
  • Participated in major contract re-competitions resourcing e2e, applying industry expertise to deliver quality, cost-effective service contracts, in close collaboration with Procurement team made up of, Director of HR and Administration, audit/internal control and the Legal Department
  • Saved 50% of fuel/lubricants cost by entering into a contractual agreement with a vendor by supplying on monthly basis at reduction cost of 10% on the market price eliminating leakage in the system
  • Frequent research of best practices and resources information technology, communication, project, and service management methods and frameworks as they relate to IT sourcing and vendor management
  • Demonstrated ability to manage a large budgets and exercise fiscal responsibility
  • Frequent research of best practices and resources information technology, communication, project, and service management methods and frameworks as they relate to IT sourcing and vendor management

Confidential

System Administrator

Responsibilities:

  • Collaborated with Price Water Coopers (PwC) to implement Microsoft Great Plains for the organization
  • Collaborated with Joe Hyde & Co to produce an audited account with Microsoft Excel
  • Collate Regional Accountants Monthly Report and produced Monthly Budget Allocation in return using Microsoft Excel
  • Collate all Department, Regional and units Accounts to produce the organization’s final Accounts using Microsoft Excel
  • Used Microsoft Excel to Process the Company’s Budget and Allocation for the various departments
  • Managed the processing of stores and inventory data with BPCS and Microsoft Excel.
  • Managed the Administration of Microsoft Great Plains Dynamics - Enterprise Resource Planning (ERP) for all users.
  • Managed the assigning and revoking user privileges using least privilege and role-based policies.
  • Facilitated of Microsoft Great Plains Dynamics -Enterprise Resource Planning (ERP) application users.
  • Conducted the end of month closing period for Great Plains System
  • Managed the Implementation of new and modern technologies for the Finance Department.

We'd love your feedback!