Cybersecurity RMF & ISSM Specialist

AMANDA P. KING

Palm Bay, FL ***** - 321-***-**** – *********@*****.***

Active Top Secret//SCI clearance with Special Access and a Counterintelligence Polygraph

SUMMARY

Detail oriented and highly motivated individual with over 14 years cybersecurity experience surrounding classified programs and systems. Results driven professional with the ability to evaluate and reduce risk while ensuring operational missions are met and Government requirements are satisfied.

TECHNICAL SKILLS

Microsoft Windows Server 2019, 2016, 2012 R2, and 2008 R2; Windows 11, 10, 7, and XP; Ubuntu 14.04, 16.04, 18.04, 20.04, and 22.04; CentOS; SCAP Compliance Checker; STIG Viewer; Nessus; Splunk; HP and Dell servers/clients; network attached storage devices; printers; and other peripherals.

PROFESSIONAL EXPERIENCE

Regional Information System Security Manager

CACI Azure Summit LLC Melbourne, FL July 2026 – Present

Serve as the Regional ISSM of record for CACI sites across the US.

Lead a team of ISSOs and ISSMs to ensure compliance with all government regulations.

Mentor ISSOs on daily, weekly, monthly, quarterly, and annually responsibilities.

Reviewed, updated, and provided feedback for cybersecurity strategies, policies, and standards, across the company.

Perform Peer Assessments to prepare CACI sites for Security Reviews/Customer Assessments.

Serve as eMASS Subject Matter Expert (SME) ensuring ISSOs are trained on all aspects of the database.

Information System Security Manager

CACI Azure Summit LLC Melbourne, FL July 2025 – July 2026

Serve as the ISSM of record for future network in the Melbourne, FL facility.

Mentor ISSOs on daily, weekly, monthly, quarterly, and annually responsibilities.

Designed and executed enterprise-aligned cybersecurity strategies, policies, and standards, enhancing compliance posture and reinforcing risk management frameworks that elevated security compliance across the company.

Reviewed and refined RMF documentation (SSPs, POAMs, SCTMs, SOPs, ConOps, and test plans), ensuring timely AO approvals, accelerating project delivery, and reducing audit cycle durations.

Serve as eMASS Subject Matter Expert (SME) ensuring ISSOs are trained on all aspects of the database.

Built and implemented a Continuous Monitoring webpage for ease of tracking weekly, monthly, quarterly, semi-annual and annual ConMon activities and requirements.

Built and implemented a Power BI dashboard to track ATO and Contract expirations, staffing, operating system counts, customers, classifications of networks, self-inspections, and SVAs.

Regional Manager, Cyber Leadership

Nightwing LLC (formerly RTX-divested) Palm Bay, FL Apr 2024 – July 2025

Spearheaded cybersecurity operations and strategy for seven (7) sites, safeguarding Nightwing’s critical infrastructure and data across multiple locations, resulting in zero security breaches and compliance with all regulatory standards.

Led a high-performance team of 10 cybersecurity experts, empowering them to execute security initiatives that enhanced the Nightwing’s security posture across the Southeast and additional sites, contributing to a 40% reduction in security incidents over a two-year period.

Developed and implemented cybersecurity strategies, policies, and standards aligned with enterprise-level goals, optimizing compliance and strengthening risk management frameworks that drove improvement in overall security compliance across the region.

Reviewed and updated RMF evidence (SSPs, POAMs, SCTMs, SOPs, ConOps, and test plans), ensuring consistent and timely approval by AOs, accelerating project timelines and reducing audit cycle time.

Oversaw A&A processes, system security configurations, and continuous monitoring, which resulted in enhanced cyber hygiene and a significant reduction in vulnerability exploitations over a year.

Led internal cybersecurity compliance assessments, proactively identifying risks and driving corrective actions that ensured 100% alignment with USG directives and corporate policies, significantly reducing compliance-related penalties and fines.

Served as a trusted subject matter expert on key cybersecurity frameworks (CFR32 Part 117, NIST SP 800-53, DAAPM (now DAAG), ICD-503, JSIG) and directly influenced Nightwing’s security posture, driving key policy updates that resulted in increased security maturity across all operations.

Monitored and coordinated response to cyber incidents, leading investigations, containment, and resolution efforts that minimized downtime and financial impact, resulting in reduced incident resolution time.

Collaborated cross-functionally with internal teams (IT, Legal, senior leadership) to address security requirements and mitigate vulnerabilities, enabling seamless integration of security protocols into the company’s broader strategic initiatives, thereby minimizing risk and exposure.

Provided cybersecurity support to off-site locations, ensuring smooth operations during Security Vulnerability Assessments, network configurations, and accreditations, which enhanced mission continuity across the board.

Delivered cybersecurity support to 30+ DoD, Intelligence Community, and Special Access Programs, ensuring full accreditation and compliance, and facilitating the successful protection of highly sensitive data, driving continued trust and security with key government and defense clients.

Manager of Cyber Security and Risk Management (ISSM)

Raytheon Technologies (RTX) Palm Bay, FL Oct 2019 – Apr 2024

Managed, mentored, and trained a team of ISSOs, fostering their professional growth and ensuring the adoption of best security practices, leading to improved team efficiency and enhanced security posture.

Provided peer support to ISSMs across CODEX, sharing expertise and promoting best practices, which helped to standardize security processes and contributed to a significant reduction in security incidents across the company.

Provided cybersecurity support to remote locations, ensuring seamless Security Vulnerability Assessment preparation, network configuration, accreditation, and teleconferencing support, resulting in zero security disruptions and increased operational continuity for off-site teams.

Provided direct IS Security support to 20+ DoD, Intelligence Community, and Special Access Programs, safeguarding highly sensitive data and ensuring compliance, which led to enhanced client trust and zero security breaches during engagements.

Proficient in Risk Management Framework (RMF) documentation and accreditation processes, ensuring that all systems met stringent security requirements, reducing accreditation processing time and minimizing delays for critical system deployments.

Created and submitted SSPs and BoE documentation for system accreditation, re-accreditation, and updates, driving successful security reviews and ensuring all systems met compliance standards, which resulted in 100% system accreditation approval on the first submission.

Subject Matter Expert (SME) on CFR32, DAAPM (now DAAG), ICD-503, JSIG directives, and related policies, advancing the company’s security maturity by informing policy updates and ensuring full regulatory compliance.

Conducted peer assessments and self-inspections across nine sites, ensuring compliance and identifying improvements.

Achieved five years of flawless Security Vulnerability Assessments (SVAs) across five customer bases, with zero cyber findings in addition to seven years as ISSO.

Led eMASS training sessions for ISSMs and ISSOs, enhancing system security capabilities and equipping teams with the knowledge to improve accreditation success rates and accelerate compliance timelines.

Expertly managed data spill cleanup, mitigation, and reporting, ensuring rapid and effective responses that minimized risk and prevented potential data breaches, protecting both the company’s reputation and its client relationships.

Information Systems Security Officer (ISSO)

Raytheon Technologies (RTX) Palm Bay, FL Mar 2012 – Oct 2019

Provided direct IS Security support to 20+ DoD, Intelligence Community, and Special Access Programs.

Created and submitted System Security Plans and other BoE documentation for accreditation, re-accreditation, and revisions for new and existing systems.

Maintained classified systems with vulnerability scans using the CIS Toolkit, Nessus, Rapid 7, and SCAP Compliance Checker resulting in 100% compliance with published Government requirements.

Conducted peer assessments and self-inspection of systems throughout the 9 sites within CODEX.

Completed seven years of customer Security Vulnerability Assessments (SVAs) in 5 customer bases, with no cyber findings or vulnerabilities.

Provided initial and follow-on briefings and trainings to general and privileged users to ensure they remain cognizant of proper procedures related to classified systems.

Performed user account verification to ensure only those personnel with the requisite clearance and need-to-know are granted physical and logical access to classified systems.

Verified critical program data and security backups on all systems to ensure integrity and recovery capabilities.

Performed critical operating system updating and patching to keep pace with industrial best practices.

Reduced insider threat risks by conducting weekly security audits on secure systems via Event Viewer and/or Splunk and by scheduling routine virus, malware, and spyware scans.

Built, configured, and applied security policies to systems using OS installation disks, SCAP Compliance Checker, Nessus, Rapid7, and CIS Toolkit before deployment.

EDUCATION

Bachelor of Science Information Technology - Cyber Security Southern New Hampshire University (SNHU)

Member of SNHU The National Society of Leadership and Success (Sigma Alpha Pi) January 2019

ADDITIONAL TRAINING AND CERTIFICATION

Security + Certification CE Obtained: October 2016 Expiration: Oct 2028

CISM Planned: Winter 2026

Member of the NCMS Space Coast Chapter & Member of CAISSWG

Contact this candidate