* * * * *

DAVID EMOJONG MD, MPH, MSC

Email: adsng8@r.postjobfree.com; Cell: 916-***-****

SUMMARY

Comprehensive knowledge and implementation of the Health Insurance Portability and Accountability Act (HIPAA) regulations and guidelines.

Extensive knowledge of FISMA information security risk management, governance and implementing the six steps of the Risk Management Framework (RMF). Designing and executing security training programs for Information Categorizing, Selecting, Implementing, Assessing, Authorizing and Monitoring Security Controls.

Experienced assessor with mastery knowledge the NIST 800-53 Security and Privacy Controls for Information Systems and Organizations and NIST 800-66 Guide for Implementing the Health Insurance Portability and Accountability Act Security Rule.

Knowledge of the Federal Risk and Authorization Management Program (FedRAMP) required documentation, process and implementation.

Proactive team player, analytical with excellent interpersonal, critical thinking, problem solving, and time management skills and multicultural awareness. Ability to prioritize tasks and deadlines and clearly and effectively convey issues, reports, and other deliverables to and from stakeholders at the executive level. PROFESSIONAL EXPERIENCE

Program Manager

I Choose Life (ICL) - Africa, Davis, California January 2017 – Present

Manage programs and projects including software engineering, enterprise applications and infrastructure, networking, security, service delivery, cloud; and health and safety projects.

Implement the NIST 800-53 controls and provide guidance on security assessment and continuous monitoring of the controls.

Provide guidance on issues related to information privacy laws and regulations including those governing access, release of information, and security technologies.

Guided third party vendor in generating security documentations such as; system security plan (SSP), systems security controls implementations statements and artifacts, FedRAMP packages, standards for security categorization (FIPS 199), boundary scope memorandum (BSM), security assessment plan (SAP), configuration management plan (CMP), audit plan (AP), information system contingency plan (ISCP), risk assessment report (RAR), business impact analysis

(BIA), significant change determination Form (SCDF), interconnection security agreement (ISA), Memorandum of Understanding (MOU), service level agreements (SLA), incident response plan (IRP), and disaster recovery plan

(DRP).

Network redesign resulted in improved bandwidth, segmented and easier to improve security; increased network monitoring; better visibility into the network and its functions.

Advocate for fairness, diversity, equity and inclusion in the hiring process, support internships, mentorships, coaching and diversity initiatives across the organization. Senior Consultant and Team Lead

I Choose Life (ICL) - Africa, Davis, California Feb 2014 – Dec 2016

Coordinated with the client and other stakeholders in planning, developed and implemented long-term process improvements in multiple areas including program management; system security; requirements management and governance; quarterly releases and deployment management. Ensured thorough documentation reviews and supported the change control board (CCB).

Designed and implemented program management plans and applicable sub-plans including risk management, change management, scope management, schedule management, communications management, stakeholder management, quality management.

2 P a g e

Executed projects monitoring and control oversight for defined IT governance reviews: proactively reviewed integrated project plans and schedules.

Program Manager

Health Education Council, West Sacramento, CA June 2015 – March 2016

Managed, and implemented processes to ensure the organizations compliance with applicable federal and state HIPAA regulations and guidelines, regarding the organizations access to and use of protected health information

(PHI).

Evaluated the organizations existing policies and procedures for HIPAA compliance by performing HIPAA risk assessments.

Collaborated with plan management, administration, and legal counsel to identify and address privacy policies and procedures that require improvement.

Developed and assisted with implementation of new HIPAA policies and procedures and updates.

Maintained policies and procedures related to PHI access and use; ensured strict adherence by all staff with access to PHI.

Assessed methods and procedures used to store and transmit PHI, identified security or other compliance risks and researches and recommended improvements.

Maintained required records and supporting documentation including authorization forms, notices, and plan documents.

Communicated with individuals regarding their right to inspect, amend, and restrict access to their PHI.

Drafted and implemented procedures for addressing and resolving complaints regarding the organizations privacy policies and procedures.

Served as the internal subject matter expert on HIPAA, maintaining current knowledge of HIPAA laws and regulations, and any other applicable federal and state privacy laws or regulations. Adjunct Professor

Sierra College, Rocklin, CA August 2015 – March 2019

Developed and lead the health information privacy committee and task force.

Developed and provided training on Information security and health information privacy requirements and procedures

Prepared lectures materials and executed training to students and conducted discussion on the topics regarding Information security.

Designed, analyzed and interpreted quantifiable chemistry metrics for innovative classroom delivery techniques to accommodate individual student needs.

Counseled students on academic issues and personal issues; scheduling labs and inspecting equipment and student lab notebooks.

Using scrum/agile methodologies, planned, organized, and provided guidance and direction to carry out assigned projects and tasks in line with the standards, regulations, policies, and guidelines. Program Manager

Super Shuttle, Sacramento, CA Feb 2010 – Sept 2013

Developed and provided security awareness and education.

Successfully ensured support and maintenance of applications, developed service level agreements (SLA); customer liaison and support.

Reviewed the existing system's security documentations, controls and findings as a result of users’ contacts, post- implementation reviews, risk and vulnerability assessments, quality assurance, audit trails and other fact-finding artifacts; and recommended corrective actions to remedy security deficiencies and ensure the integrity and protection of the information processes and systems.

3 P a g e

Research Assistant II

ChemBridge Research Laboratories, CA April 2002 – June 2005

Participated in reviewing and evaluating the chemistry, formulation, manufacturing, aspect of every drug intermediate and biopharmaceuticals including drug releases and technical aspects of labeling and environmental impact as well as presenting information required for patent application writers.

Designed, solve complex synthetic problems and execute multi-step syntheses of complex biologically active natural products, synthesis of intermediates and target compounds, characterization, large scale manufacture, purification, release and stability testing of drug substances and drug products. Mentored and instructed new graduate MSc and PhD chemists on how to use state of the art purification equipment in-house.

Took them through a step by step methodology of how to open and put together equipment to help find out bottle necks during drug purification using HPLC BIOTAGE and ISCO compound purification systems machines; Developed and delivered oral and written presentations on drug discovery progress regarding stability, deficiencies and challenges during step up synthesis to a predominantly PhD and MBA audience during in house and meetings with clients; and Participated in quality control, weighing, bottling and labeling of intermediate and final compounds and products before submission to clients.

Research Assistant II

MAXIA Pharmaceuticals, CA April 2002 – June 2005

Established chemically relevant standard operating procedures (SOP) for each product to ensure its clinical performance during the entire lifecycle of the drug intermediate/product for approval for both in-vivo and in-vitro studies in mouse models before release to clients.

Evaluated the adequacy of analytical methods and validation of reports used during synthesis, characterization, manufacture, release and stability testing of drug substances and drug products.

Achieved organic chemical synthesis goals using multi-step synthesis of both small and large intermediates and final products through synthetic route selection, optimization, purification and analysis of compounds. EDUCATION

The George Washington University: Master of Public Health, the Milken Institute School of Public Health Washington, DC 05/2016.

Washington University of Health and Science: Doctor of Medicine, San Pedro, Belize, 06/2014.

California State University Sacramento: Master of Chemistry, Sacramento, CA 05/2000. CERTIFICATIONS

Certified Information Systems Security Professional (CISSP®): Studying towards certification.

Splunk: Studying towards certification.

ENVIRONMENTS and PLATFORMS

Windows, Microsoft Office (Word, PowerPoint, Excel, Access, Visio, Project, Publisher), SharePoint; PMO, PMBOK, Primavera Risk/PERTMaster, Expert Choice, Comparison Suite, Palisade Data and Risk Analysis Tools, RAD/JAD, Waterfall and Agile methodologies; Business Intelligence (BI): SAP Enterprise (WebI, Crystal Reports, Dashboards), Tableau; ServiceNow; Slack; JIRA, Confluence; Team Foundation Server (TFS); Mortice Kern Systems (MKS) Integrity; HP Application LifeCycle Management (ALM)/Quality Center; IBM Requisite Pro, Rational Software Modeler; Remedy; Statistical Package for the Social Sciences (SPSS®); Microsoft Security Development Lifecycle (SDL) for threat modeling; Cybersecurity; National Institutes of Standards and Technology (NIST) cybersecurity framework and standards, Vendor Management, Strategy, People Management and Leadership etc.

Contact this candidate