Steve C.

Information System Security Manager (ISSM)/Senior Information Security Analyst and Subject Matter Expert at Leidos

Silver Spring, MD, United States

Details

Experience: 2020 : Present

Leidos

Information System Security Manager

I am an IT security professional with comprehensive knowledge and skills in cyber security compliance and assessment. I have over 15 years of technical project management experience, managing IT security and data management teams, developing IT security policy and supporting procedures, conducting information assurance activities, managing and performing risk assessments, continuous monitoring of internal security controls, assessment and authorization (A&A), and information assurance (IA). My knowledge, skills, and abilities include in-depth knowledge of the Federal Information Security Management Act (FISMA) and National Institute of Standards and Technology (NIST) guidelines, NIST Risk Management Framework, FedRAMP/Cloud-based systems security, and project management best practices, including Earned Value Management. I have expert knowledge of security architectures, commonly implemented security processes, and control implementation principles. My certifications include CISSP, CAP, and PMP. I have an active Top Secret Clearance.

2003 :

Leidos

Senior Cybersecurity Lead

Company: Leidos

About

Information System Security Manager (ISSM)/IT security professional with comprehensive knowledge and skills in security compliance and assessment. Over 15 years of technical project management experience, working closely with the ISSO and Agile development teams to ensure compliance with the Risk Management Framework, managing IT security assessment teams, developing IT security policy and supporting procedures, conducting information assurance activities, performing risk assessments and continuous monitoring of internal controls, assessment and authorization (A&A), and information assurance (IA). Knowledge, skills, and abilities include in-depth knowledge of the Federal Information Security Management Act (FISMA) and National Institute of Standards and Technology (NIST) guidelines, FedRAMP, and project management best practices, including earned value management. Expert knowledge of security architecture, commonly implemented security processes, and control implementation principles.

Certifications include CISSP, CAP, and PMP.