| SUMMARY OF QUALIFICATIONS |
| Over 18 years of Information Technology IT experience including Cyber / Information Security,Program Oversight, Process Engineering, Quality Assurance, Change andRisk Management, andData Collection / Analysis. |
| WORK HISTORY |
| Cyber Security Analyst |
- Authors Cyber Security assessment and surveillance reports that provide the Y-12 Information Security Site Manager ISSM and NNSA Oversight with visibility into the health of the Y-12 cyber program.
- Conducts management assessments and surveillances ofeach aspect of the cyber program to verify security controls in the Y-12 environmentare consistently implemented and compliant withY-12, DOE, and NNSArequirements.
- Supports Y-12 Cyber Security Program with oversight responsibilities in contractor assurance includingsecurity control assessments, continuous monitoring, and metrics collection and trending.
- Oversees the Cyber Security issue management program ensuringcorrective actions are tracked to closure.
- Participates in issue casual analysis, remediation cost benefit analysis, extent of condition reviews, and corrective action plan development.
- Reviews and revises information system security plans for Y-12 information systems ensuring compliance with Federal requirements including NIST 800-53, OMB A-130, FIPS 140-2 and NAP 14.1D.
- Developed and maintains vulnerability management and remediation tracking databases.
- Collects and reports Cyber Security metrics to Senior Y-12 and DOE/NNSA management.
- Responds to federal data calls and audits via cyber metrics data collection and analysis, documentation repository management, and formal correspondence/delivery.
- Tracks system patch status and works with system owners to ensure that software patch releases have been successfully installed on Y-12 information systems.
- Administers Y-12 Cyber Security SharePoint site including access management, version control, workflow development, and file structure maintenance.
- Deployed and administers the Y-12 Cyber Security website ensuringfederal and internal stakeholders have access to the most recent Y-12 Cyber guidance and direction.
- Y-12 Safety Management Co-Lead responsible for communicating and implementing Y-12 safety initiatives to Cyber personnel.
- Currently pursuingCISSP - Certified Information Systems Security Professional certification.
- Active Department of Energy DOE Q Clearance through March 2016.
|
| Program IT Risk and Issue, QA Oak Ridge, TN |
- Implemented risk and issue management program for the VA Healthcare Data Repositories Program and associated projects. Led continuous process improvement initiatives. Conducted process and product audits. Authored program policies, procedures, and tools.
- Facilitated/coordinatedthe VA Healthcare Data Repositories Risk and Issue Management Boards.
- Monitored risk management program ensuring on-going risks were continually re-evaluated, prioritized accordingly, and effectively mitigated.
- Standardized quality assurance, risk and issue management, and metrics tools, policies, procedures,guidance, and templates.
- Collaborated with project management and staff to develop effective mitigation strategies.
- Collected, analyzed, and reportedprogram and project metrics.
- Conducted Quality Assurance process and product audits to evaluatecompliance with Section 508, HIPPA and FISMA laws and regulations.
- Directedprocess improvement initiatives including root cause and lessons learned sessions.
- Tracked program issues and remediation actions to closure.
|
| Enterprise IT Program Risk and Change Manager Confidential |
- Coordinated/facilitated Enterprise Change Control Board CCB ensuring product and process changes were analyzed for impacts and tracked to completion.
- Consulted with Pfizer Senior Management to institutionalize best practice issue and change management processes.
- Trained and managed ateam of 4 Change Management Specialists in day-to-day activities.
- Ensured that each change request presented to the CCB was documented thoroughly including sufficient description detail, estimated cost and effort, and analysis of impact to other systems/software.
- Collected, analyzed, trended, and presented actionable performance measurement data.
|
| IT Program QA and Metrics Manager Confidential |
- Facilitated/coordinatedCDC CCB, technical reviews, and lessons learned sessions.
- Collected and analyzed data for program management reports.
- Conducted Quality Assurance process and product audits to evaluate compliance with Section 508, HIPPA and FISMA requirements.
- Produced value-added QA reports and tracked deficiencies to closure.
- Chosen to participate inCMMi ARC-B Appraisal to evaluate process maturity level.
|
| IT Research and Development Metrics Manager Confidential | - Managed a team of 2 IT metrics specialists responsible for tracking over 800 data elements. Developed and implemented one of the first software development metrics programs in the United States to be successfully appraised at CMMi Maturity Level 5.
- Facilitated/coordinated Service Level Agreement reviews between SAIC and the client.
- Developed and maintained Excel and Remedy metrics collection and reporting tools.
- Analyzed impacts of proposed changes to tools and processes for consequences to trending capabilities.
- Collaborated with the client to define a metrics strategy that told a story and produced actionable results.
- Maintained the historical database to protect data integrity so that basis of estimate data and proposed actions to optimize processes were based upon sound data.
- Awarded Most Valuable Player for technical skills, customer service, positive attitude, and contributions made to the program.
- Made frequent contributions to the quality of the SAIC Organizational process assets by sharing lessons learned and process improvement suggestions.
- Prepared for, and participated in, an external SEI CMMi Maturity Level appraisal enabling SAIC to grow business and promote the organization as successfully appraised at the highest maturity level, CMMI ML 5, or Optimized .
| |
Privacy Policy
