Security Control Assessor Resume
Summary : As a Security Control Assessor, performed activities for new and existing IT Systems to be defined as a specific task., used of FedRAMP methodology and processed for cloud systems.
Skills : Proficiency in information security principles and practices, Knowledge of various security frameworks.
Description :
- Played a pivotal role in managing Incidents, identifying Problems, and implementing proactive measures to enhance service quality.
- Collaborated with cross-functional teams to drive continuous improvement in service delivery, ultimately ensuring the satisfaction of our internal customers.
- Led the response to service Incidents and disruptions, ensuring timely resolution and minimal impact on customers.
- Established and followed incident management processes to classify, prioritize, and coordinate incident resolution efforts.
- Worked with IT teams to ensure adherence to the Incident Management process.
- Collaborated with technical teams to ensure effective incident response and restoration of services in line with the Incident Management Process and SLAs.
- Controlled ticket lifecycle for the North American region.
Experience
10+ Years
Level
Senior
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Summary : As a Security Control Assessor, trained of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, and non-repudiation).
Skills : Experience with risk management tools and techniques and analytical Skills.
Description :
- Trained in Independent Verification and Validation (IV&V) of security controls.
- Welltrained of general attack strategies (MITRE ATT and CK Framework).
- Trained in NISPOM, ICD 503, NIST SP 800-53, ICD 705, and other ICDs as appropriate.
- Conducted vulnerability scans and recognized vulnerabilities in security systems (Cloud Environments) ASW, Google, IBM, Azure, and Oracle.
- Well-trained of network access, identity, and access management e.g. public key infrastructure (PKI).
- Trained of network protocols such as Transition Control Protocol/Internet Protocol (TCP/IP), Dynamic Host Configuration, Domain Name System (DNS), and directory Services.
- Assessed the robustness of security systems and designs.
Experience
7-10 Years
Level
Management
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Summary : As a Security Control Assessor, maintained appropriate technical and procedural documentation, and built and maintained client and stakeholder relationships.
Skills : Strong analytical and problem-solving abilities and attention to Detail.
Description :
- Completed projects, tasks, and associated deliverables on time and with quality.
- Conducted hands-on security testing, analyzed results, documented risks, and recommends countermeasures.
- Advised and assisted with the Lifecycle Assessment and Authorization (A&A) process and development of a Systems Security Plan (SSP).
- Coordinated A&A actions and system testing with appropriate security personnel.
- Applied working knowledge of Intelligence Community Information Assurance policies and regulations and how they relate to the A&A process.
- Tested security architectures of cloud-based systems and applications, identifying vulnerabilities and providing security remediation.
- Contributed to the organization’s overall risk management process by identifying, evaluating, and mitigating security risks.
Experience
7-10 Years
Level
Management
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Objective : As a Security Control Assessor, reviewed vulnerability scan results recognized vulnerabilities in security systems, and supported necessary compliance activities (e.g., ensuring that system security configuration guidelines were followed, compliance monitoring occurs).
Skills : Communication Skills, Project Management.
Description :
- Tailored assessments and analysis to the necessary levels (classification and organizational).
- Tracked audit findings and recommendations to ensure that appropriate mitigation actions are taken.
- Translated data and test results into evaluative conclusions.
- Understood technology, management, and leadership issues related to organization processes and problem-solving.
- Understood the basic concepts and issues related to cyber and its organizational impact.
- Verified application software/network/system security postures are implemented as stated, documented deviations, and recommended required actions to correct those deviations.
- Worked in a collaborative environment, seeking continuous consultation with other analysts and both internal and external to the organization—to leverage analytical.
Experience
2-5 Years
Level
Executive
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Headline : As a Security Control Assessor, performed risk assessments, evaluated security documentation, and provided written recommendations for authorization, performed security assessment of information systems leveraging established testing and evaluation techniques and tools.
Skills : Knowledge of Regulations and Standards, Familiarity with regulatory requirements and industry standards.
Description :
- Performed security reviews, identify gaps in security architecture, and develop a security risk management plan to include recommendations for remediation.
- Prepared and maintained required artifacts, Security Assessment Report (SAR) and associated documentation.
- Provided input to the Risk Management Framework process activities and related documentation.
- Recognized a possible security violation and take appropriate action to report the incident, as required.
- Recommended corrective actions to address identified findings and/or vulnerabilities from an assessment.
- Reviewed artifacts provided, some of which may be technical or procedural.
- Reviewed authorization and assurance documents to confirm that the level of risk is within acceptable limits for each software application, system, and network.
Experience
5-7 Years
Level
Executive
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Summary : As a Security Control Assessor, identify measures or indicators of system performance and the actions needed to improve or correct performance, relative to the goals of the system.
Skills : Understanding of compliance and auditing processes., Technical Writing, Critical Thinking.
Description :
- Identified systemic security issues based on the analysis of vulnerability and configuration data.
- Interpreted and translated customer requirements into operational action.
- Interpreted patterns of noncompliance to determine their impact on levels of risk and/or overall effectiveness of the enterprise's cybersecurity program.
- Participated as a member of planning teams, coordination groups, and task forces as necessary.
- Participated in the Risk Governance process to provide security risks, mitigations, and input on another technical risk.
- Performed analysis of security features for system architectures.
- Performed impact/risk assessments.
Experience
7-10 Years
Level
Management
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Summary : As a Security Control Assessor, supported continuous monitoring activities by regularly reviewing and updating security controls to maintain compliance and address emerging threats, worked closely with system owners, security personnel, and other stakeholders to communicate assessment results and assist in the implementation of corrective actions.
Skills : Understanding of compliance and auditing processes., Technical Writing, Critical Thinking.
Description :
- Developed assessment plans, including defining the scope, objectives, and methodology for evaluating security controls.
- Conducted thorough evaluations of security controls, including technical, operational, and management controls, to determine their effectiveness.
- Identified and assessed security risks associated with information systems, documenting potential threats and vulnerabilities.
- Reviewed and analyzed security documentation, including policies, procedures, and system security plans, to ensure they meet compliance requirements.
- Performed security testing and validation activities, such as vulnerability assessments, penetration testing, and security audits, to verify the implementation and effectiveness of controls.
- Ensured that security controls comply with relevant standards and regulations, such as NIST, ISO 27001, FISMA, and other industry-specific requirements.
- Prepared detailed assessment reports that document findings, recommendations, and corrective actions required to address identified security issues.
Experience
7-10 Years
Level
Management
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Headline : As a Security Control Assessor, developed security compliance processes and/or audits for external services (cloud service providers, data centers), developed, reviewed, endorsed, and recommended action for both the Risk Executive and Authorizing Official.
Skills : Security Control Assessment, Risk Management Framework (RMF).
Description :
- Discerned the protection needs (security controls) of information systems and networks.
- Ensured plans of action and milestones or remediation plans were in place for findings and vulnerabilities identified during risk assessments, audits, and inspections.
- Ensured security design and cybersecurity development activities were properly documented (providing a functional description of security implementation) and updated as necessary.
- Ensured security improvement actions were evaluated, validated, and implemented as required.
- Demonstrated strong analytical, troubleshooting, and problem-solving skills for security information and event management.
- Identified cybersecurity and privacy issues that stem from connections with internal and external customers and partner organizations.
- Assisted in preparing for and responding to external audits and assessments conducted by regulatory bodies or third-party assessors.
Experience
5-7 Years
Level
Executive
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Headline : As a Security Control Assessor, assessed information assurance and security requirements based upon the analysis of user, policy, regulatory, and resource demands, and assessed security systems designs.
Skills : NIST SP 800-53 and SP 800-37, FISMA Compliance.
Description :
- Assisted client and team with responses to data calls and audits.
- Assisted with the preparation of accreditation packages.
- Collected and maintained data needed to meet assessment reporting.
- Conducted application vulnerability assessments.
- Conducted periodic testing of the security posture of the information system.
- Continuously validated the organization against policies/guidelines/procedures/regulations/laws to ensure compliance.
- Understood how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
Experience
5-7 Years
Level
Executive
Education
Bachelor's In Computer Science
Security Control Assessor Resume
Summary : As a Security Control Assessor, provided a comprehensive verification and validation report (certification report) for the information system, and provided process improvement recommendations.
Skills : Vulnerability Assessment, Security Testing and Evaluation (ST&E).
Description :
- Assisted the Government in drafting standards and guidelines for the usage of Education and Experience.
- Trained in security or system engineering in five or more areas, including telecommunications concepts, operating systems, databases/DBMS, middleware, applications, web servers, SANS/Netaps, Active Directory, firewalls, and controlled interfaces.
- Worked for an established company that values your stable career.
- Worked with a team that loves their job and making cool stuff.
- Assessed the configuration management (change configuration/release management) processes.
- Assessed changes in the system, its environment, and operational needs that could affect the accreditation.
- Provided guidance and training to organizational staff on security control requirements and best practices.
Experience
7-10 Years
Level
Management
Education
Bachelor's In Computer Science
