Security Management

D erek M C rain

**** ********* ***. **. *****, MO 63104 Phone: 618-***-**** Email: **.*****@*****.***

O verview

Currently working on an Information Systems Security contract for the United States Department of

Agriculture (USDA) Rural Development (RD) Information Systems Security Staff (ISSS).

Experience with and knowledge of PCI-DSS, HIPAA, FISMA, GLBA, HEOA, FERPA and DCMA

regulations and requirements. Most familiar with HIPAA, PCI -DSS and FISMA through work with the

USDA.

Active United States Government Security Clearance.

Background in technical writing sharpened skills and the ability to communicate, both verbally and in

print, technical information for a wide range of audiences.

Basic Skills

Project Management (cost, schedule) Journalistic and Technical

Corporate Communications Writing/Reporting

Desktop Support Computer Networking and Design

Web & Print Content Development Hardware/Software Troubleshooting

Development of Training Materials Programming Logic – Visual Basic

Technology Skills

QuarkXPress, ImageReady, MS Office (Word, Access, Excel, PowerPoint, Outlook,

Software:

Visio, Project, Publisher, SharePoint), Prolog, Visual Basic, Adobe InDesign,

PhotoShop, Citrix Database Management Systems, ACF2 Mainframe environment

and Remedy Self-Serve Ticketing System.

Flash, Dreamweaver, Search Optimization, Web Server Administration, Content

Web/Multimedia:

Management Systems

Proficient in all Microsoft Operating Systems dating back to Windows 95 and have a

Operating

working knowledge of Macintosh Operating Systems dating back to Mac OS7 as

Systems:

well as Server 2003 and 2008

Active Directory, Cisco router/switch installation and maintenance, NIST Special

Other:

Publications, ISO 9000, WAN/LAN troubleshooting, design and maintenance

Professional Experience

OPEN SYSTEM SCIENCES (OSS)

A Virginia-based Information Technology Firm Specializing in Large-Scale government contracts.

Information Systems Security Senior Program Support Analyst/Deputy PM June 2011 to present

Write, review and edit technical Information Systems Security documentation for submission and

government approval.

Work with User Access Management Team, Disaster Recovery Team and Certification and

Accreditation Team to create, review, update and ed it sensitive security documentation (System

Security Plans, Privacy Impact Analysis, Privacy Threshold Analysis, Security Needs Assessments and

Business Impact Analysis/Disaster Recovery Plans) to support agency-wide USDA security program.

Developed and manage master project plans and government deliverable schedule.

Develop management annual training and new hire training materials in response to and as directed

by NIST SP 800 series standards as well as satisfying ISO 9000 series requirements.

Derek Crain Resume Page 1

Manage end user access control with the use of Active Directory and agency developed UAM system.

Add/modify/remove end user access using the ACF2 Mainframe computing environment.

Serve as contractor liaison between hardware and software troubleshooting team to ensure proper

security controls and protocols are always current on all machines operating on the USDA network.

Work closely with online-based database developer to ensure privacy standards are met and routinely

exceeded and that the database always operates under current security standards and protocol

regulations.

Help maintain current list of malicious software programs and other threats and vulnerabilities to our

network. This list is distributed daily to the departments that control hardware and softw are updates

and patches, as well as the database developer to ensure the systems are safe and protected from

potential threats to the security of the data and the privacy of thousands of customers.

Selected Accomplishments:

Played pivotal role in reorganizing, rectifying and improving documentation Quality Assurance

Program and delivery process with the use of technical expertise, documentation templates and

continuous training.

Scored 875 out of a possible 900 on the CompTIA Security+ Examination with just three months of IT

Security Experience. Currently in preparation for CISSP Credential, plan to sit for examination

January, 2013.

SOUTHERN ILLINOISAN NEWSPAPER

A Lee Enterprise daily publication serving over 35,000 subscribers in Southern Illinois daily.

District Circulation Manager August 2009 to May 2011

Successfully managed the day to day operations of home delivery of newspaper for nearly 7,000 daily

subscribers.

Managed 42 independent contractors and 73 newspaper home delivery routes to ensure prope r

delivery and a high level of customer satisfaction.

Recruited, trained, negotiated, contracted and terminated independent contractors.

Volunteered nights and weekends to assist overworked and understaffed IT department in

hardware/software troubleshooting and in Windows 7 migration project for over 100 workstations.

URS-WASHINGTON DIVISION

Internationally-renown construction management firm specializing in Large-Scale construction

management solutions.

Technical Reporting Manager, November 2007 to July 2009

Primary objectives were to implement, design and manage the production of several reports including

such information as safety statistics, cost, schedule and quality reports for a $1.3 Billion project

Selected Accomplishments:

Successfully designed and implemented a self-written software suite designed to better equip on-site

contractors with the latest drawing revisions on a constantly changing design.

Created flow charts for scheduling department depicting critical path identification, tracking and

analysis as well as man-hour charts and graphs for upper-level management.

Education

KAPLAN UNIVERSITY

Master of Science in Information Technology, Graduated June 2012

Major: Information Security and Assurance/Program Management l Summa Cum Laude (4.0 GPA)

Program Portfolio:

https://kaplanu.optimalresume.com/previewDoc.php?tkn=463557ef820266767a0c7f077b7731e2-

p37145

SOUTHERN ILLINOIS UNIVERSITY

Bachelor of Science, Graduated May 2004

Major: Corporate Communications l Minor: English and Public Relations l Cum Laude (3.2 GPA)

Derek Crain Resume Page 2

Professional Certifications and Memberships

Certified Technical Writing Specialist (CTWS), received September 2011 from the Certified Testing

Service (CTS)

CompTIA Security+ Certification (SYO-301), received December 2011 valid through December 2014

Validation No. TY712MT16DF42M2Z (www.verify.CompTIA.org)

Active United States government Security Clearance

Member of Golden Key International Honor Society

References on Request

Derek Crain Resume Page 3

Contact this candidate