Information Systems Assurance

Randy D. Graef

**** ********** **.

Beavercreek, OH 45432

Phone: 702-***-****

E-mail: *****.*****@*****.***

OBJECTIVE

Comply with all requirements to keep networks secure preventing adversaries from compromising or infecting the system. Stay compliant with DoD and Air Force network security guidelines to include latest Security Technical Implementation Guides (STIGS), Time Compliance Network Orders (TCNO), and Information Assurance Vulnerability Management (IAVM) as well as confirm updated patches are applied. Ensure the application and related software/hardware is correctly and securely installed and maintained. Transition systems from DoD Information Assurance Certification and Accreditation Process (DIACAP) to Risk Management Framework (RMF).

SUMMARY

Successful 20 year military career. 16 years’ experience in managing information systems, logistics, inventory and data management, creating and enforcing policies/procedures. CompTIA Advanced Security Practitioner (CASP) certified with experience in the RMF Continuous Monitoring (CM) process. Proven record migrating a system from DIACAP to RMF in the Enterprise Mission Assurance Support Service (eMASS). Superior capacity to solve complex problems involving a wide variety of information systems, work independently on large-scale projects, and thrive under pressure in fast-pace environments while directing multiple projects from concept to implementation.

AREAS OF EFECTIVENESS

CYBERSECURITY MANAGEMENT

• Provide security recommendations/remedial actions to the client to ensure IS compliance is met and plan of actions and milestones are define accordingly

• Conduct risk assessments and collaborate with clients to provide recommendations regarding critical infrastructure and network security operations enhancements

• Develop Continuity of Operations (COOP) and Disaster Recovery (DR) operations and conduct evaluation of COOP and DR during annual incident response training

• Ensure information systems security and application security policies and procedures (Security Technical Implementation Guides (STIG) Information Assurance Vulnerability Management (IAVM), and Federal Information, Security Management Act (FISMA) are followed

• Develop/implement System Security Plans (SSP), Security Assessment Plan (SAP), Contingency Plan (CP), Cybersecurity Strategy, Incident Response Plan (IRP), Mission Risk Assessment Brief (MRAB), Plan of Action and Milestones (POAM)

• Conduct information system (IS) security assessments and validations

• Participate in system Certification and Accreditation as well as Federal Information Security Management Act (FISMA) processes

• Manage Ports, Protocol and Service worksheet

INFORMATION MANAGEMENT

• Developed and Compiled Integrated Maintenance Data System (IMDS) Reports

• Compares and examines critical aircraft system performance status with data from maintenance managers.

• Lead analyst for monthly and annual publication of trend analysis

• Identified and assisted superiors in analysis of parts deficiencies, high staff –hours, trends, and deviations

• Evaluates maintenance data using knowledge of (parametric and non-parametric) statistical testing

• Computes and establishes realistic standards and goals for 13 aircraft models

• Compiled data on standardization of performance metrics to expedite logistics activities

• Developed and Compiled Reliability & Maintainability Information System (REMIS) Reports

• Prepare briefings and reports for senior management regarding logistics supportability

• Produced flying schedule and monthly maintenance forecasts

• Monitored and managed Time Compliance Technical Order program

DATABASE MANAGEMENT

• Resolved database problems in timely manner that the normal operators could not solve

• Develop system information resources, providing for data security and control, strategic computing, and disaster recovery

• Provide users with technical support for system problems

• Train users and answer questions

• Approve, schedule, plan, and supervise the installation and testing of new products and improvements to system

• Diagnose, troubleshoot, and resolve hardware, software, or other network and system problems, and replace defective components when necessary

OTHER AREAS

• Senior Controller in the Maintenance Operation Center

EXPERIENCE

Information System Security Officer, REMIS

Subject Matter Expert, REMIS

Maintenance Operation Center Non Commission Officer

Analysis Section Non Commission Officer

Database Management Section Non Commission Officer

Instructor, Maintenance Data Systems Analysis Course

EDUCATION

Non Commissioned Officers Academy; Leadership Course, Kessler, AFB, MS, 2009

Associates of Arts, Production Management, Community College of the Air Force, Maxwell AFB, AL 2002

Maintenance Data Systems Analyst; Craftsman Course, Sheppard AFB, TX, 2001

Basic Instructor Course, Sheppard AFB, TX, 2001

Airman Leadership School; First line Supervisor Course, Travis AFB, CA 1999

Maintenance Management Analysis; Journeyman Course, Sheppard AFB, TX, 1994

Maintenance Data Systems Analysis; Apprentice Course Sheppard AFB, TX, 1993

SYSTEM EXPERIENCE

• ESD (Enterprise Service Desk, IAO Express)

• eMASS (Enterprise Mission Assurance Support Service)

• FERT (Firewall Exception Request Tool)

• IMDS (Integrated Maintenance Data System)

• G081 (CAMS for Mobility)

• G054 (CAMS – Core Automated Maintenance System)

• REMIS (Reliability& Maintainability Information System?

• EMOC (Electronic Maintenance Operation System)

• GCSS-AFDS (Air Force Data Services) formerly EDW (Enterprise Data Warehouse)

• REMIS (Reliability& Maintainability Information System?

• ECSS (Expeditionary Combat Support System)

• EMOC (Electronic Maintenance Operation System)

• TAS (Tool Accountability System)

• LIMS-EV (Logistics Installations and Mission Support-Enterprise View)

• ETIMS (Enhanced Technical Information Management System)

• Experienced in the use of computers and programs to manipulate raw data into meaningful information.

• Microsoft Word 1995-2007 versions

• Microsoft PowerPoint 1995-2007 versions

• Microsoft Excel 1995-2007 versions

• Microsoft Access 1995-2007 versions

• Microsoft Office 2000-2007 versions

• Microsoft XP versions

• Monarch

• Well versed in reviewing technical data for accuracy and revising procedures for ease of maintenance.

• Able to extrapolate data, produce reports, create meaningful graphs for interpretations of data

• Proficient in troubleshooting and isolating computer network connectivity problems.

• Talented in the installation of software and hardware in personal computers.

• Interpersonal skills, people oriented provide excellent customer service

CLEARANCE AND CERTIFICATION

SECRET

CompTIA Advanced Security Practitioner (CASP)

Contact this candidate