Security Management

FREDERICK AGBOMANYI

** ******** ****** *** @ **H, East Haven 06513 Cell; 316-***-****; ***********@*****.***

OBJECTIVE

Seeking an Information System Auditor or Information Assurance position in a growth oriented organization with focus on FISMA, Sarbanes-Oxley 404, system security monitoring and auditing; risk assessments; audit engagements, testing information technology controls and developing security policies, procedures and guidelines.

STANDARDS

COSO/COBIT, Sarbanes-Oxley Act, SAS-70/SSAE 16, ITIL, ISO 27001, Privacy Act of 1974,Gramm–Leach–Bliley Act (GLB),Certification and Accreditation, Project Management, Change Management, OMB Circular A-130 Appendix III, NIST 800-53, NSA Guide, FIPS, STIG, DoD 8500.2, DITSCAP, DoD 8510.bb, DIACAP, FISMA, FISCAM, Security Content Automation Protocol ( SCAP)

SUMMARY OF QUALIFICATIONS

I am specialized in areas such as Cyber security, Information Assurance (IA), Certification and Accreditation (C&A), Risk Management, Authentication & Access Control, System Monitoring, Regulatory Compliance, Physical and environmental security, Project Management, Incident Response, and Disaster Recovery. I possess a strong managerial skill, excellent in relation building and developing strategic partnership. I am an expert in FISMA compliance, Security Training, developing security policies, procedures and guidelines. I am highly adaptive and have superior analytical and organizational skills as well as familiar with a wide variety of applications, databases, operating systems and network devices. I am a fast learner, have the ability to multi-task, and can also work independently and as a contributing team member. I have a strong verbal/written communication skills and Technical Writing skills. I have over six (6) years of experience in information security; with five of those years spent in the (5) IT audit experience.

CERTIFICATIONS

Actively working to become Certified Information Security Auditor (CISA)

Actively working to become Certified Information System Security Professional (CISSP)

EDUCATION

Bachelor of Science in Nursing, BSN (2008)

BETHEL COLLEGE, Newton, Kansas

Awards

Dean’s List, fall 2005

PROFESSIONAL EXPERIENCE

IT Security Auditor

June 2010-

CyberVisionsTechnologies

Conducted a kick off meeting in order to categorize systems according to NIST requirements of Low, Moderate or High system

Developed a security baseline controls and test plan that was used to assess implemented security controls

Conducted a security control assessment to assess the adequacy of management, operational privacy, and technical security controls implemented. A Security Assessment Report (SAR) was developed detailing the results of the assessment along with plan of action and milestones (POA&M)

Assisted in the development of rules of engagement documentation in order to facilitate the scanning of network, applications and databases for vulnerabilities

Developed a risk assessment report. This report identified threats and vulnerabilities applicable to systems. In addition, it also evaluates the likelihood that vulnerability can be exploited, assesses the impact associated with these threats and vulnerabilities, and identified the overall risk level

Assisted in the development of an Information Security Continuous Monitoring Strategy to help in maintaining an ongoing awareness of information security (Ensure continued effectiveness of all security controls), vulnerabilities, and threats to support organizational risk management decisions

Led in the development of Privacy Threshold Analysis (PTA), and Privacy Impact Analysis (PIA) by working closely with the Information System Security Officers (ISSOs), the System Owner, the Information Owners and the Privacy Act Officer

Developed an E-Authentication report to provide technical guidance in the implementation of

electronic authentication (e-authentication)

YALE NEW HAVEN HOSPITAL

Jan 08 - Dec. 2010

Oncology: RN

Responsible for the regular checkup and physical examination of the patients

To evaluate and attain health related goals worked in collaboration with families and health care professionals.

Responsible for keeping records of the patients' reports and data.

Provide the counseling and teaching in health problems, maintenance and health services

Outstanding interpersonal and communicational skill

Contact this candidate