Risk Management Framework Cybersecurity Governance Leader
Resume:
Chelsea Brooks, CISSP, PMP, CISA
*******.*.******@*****.***
Cybersecurity Governance Enterprise Risk Technology Assessment Executive Decision Support
Core Competencies
Assessment and Governance
Cyber Operations
Leadership & Collaboration
Innovation
Cybersecurity Governance
Security Operations
Executive Decision Support
AI Governance
Enterprise Risk Management
Vulnerability Management
Organizational Maturity
Emerging Technologies
Risk Management Framework
Threat Analysis
Cross-functional Collaboration
AI Integration
Leadership Profile
25+ years leading cybersecurity governance, enterprise risk, and mission assurance initiatives across Department of Defense and federal civilian organizations.
Trusted partner to Authorizing Officials (AOs), Authorizing Official Designated Representatives (AODRs), Offices of the Chief Information Security Officer (OCISO), and senior mission stakeholders, providing objective cybersecurity assessments, enterprise risk analysis, and executive decision support.
Progressive career spanning technical cybersecurity, cyber defense operations, technology risk assessment, organizational governance, and enterprise cybersecurity leadership.
Demonstrated ability to evaluate cybersecurity technologies, operational effectiveness, governance processes, and organizational maturity to identify opportunities for continuous improvement.
Recognized for translating complex technical findings into practical, risk-informed recommendations while partnering with engineers, ISSMs, ISSOs, system owners, developers, cybersecurity teams, and executive leadership
Demonstrated success leading geographically dispersed teams across remote, hybrid, and mission-critical environments while maintaining strong technical engagement.
Committed to continuous learning and the responsible adoption of Artificial Intelligence (AI) to enhance governance, risk analysis, documentation, and executive decision support.
PROFESSIONAL EXPERIENCE
Cybersecurity Policy & Planning Manager
SMS Data Products Group Supporting Defense Threat Reduction Agency (DTRA)
May 2026 – Present (Temporary Position)
Summary: Advances organizational resilience and provides enterprise cybersecurity governance by interpreting Department of War Information Network (DOWIN) directives, evaluating organizational applicability, and guiding implementation strategies that strengthen the organization's ability to defend against evolving cyber threats, sophisticated adversary tactics, and nation-state cyber activity.
Evaluates Department of War Information Network (DOWIN) directives, Cyber Tasking Orders (CTOs), and implementation guidance to determine organizational applicability, implementation priorities, and required cybersecurity actions.
Guides implementation planning by collaborating with ISSMs, ISSOs, system owners, engineers, cybersecurity operations personnel, and mission stakeholders to develop implementation strategies, establish Plans of Action and Milestones (POA&Ms), and monitor remediation activities through successful closure.
Reviews RMF artifacts, security documentation, implementation evidence, and compliance packages to validate execution of DOWIN requirements, identify implementation gaps, and support continuous compliance with Department of Defense cybersecurity directives.
Develops governance reports, implementation status updates, compliance metrics, and executive decision support artifacts communicating organizational risk, implementation progress, and enterprise cybersecurity posture.
Supports implementation of enterprise cybersecurity requirements designed to strengthen organizational resilience against evolving cyber threats, sophisticated adversary tactics, and nation-state cyber activity while maintaining compliance with DOWIN cybersecurity standards.
Cybersecurity Program Manager
SASSI Supporting the United States Senate
May 2024 – July 2025 100% Remote
Summary: Directed the operational governance of the Senate's enterprise application cybersecurity risk assessment program, enabling risk-informed technology acquisition decisions through a formalized, repeatable assessment methodology evaluating vendor security posture, implementation risk, and residual organizational risk.
Managed the development of structured risk assessments utilizing BitSight, Interos, and other intelligence resources.
Evaluated business use cases, implementation architecture, authentication, enterprise integration, and data sensitivity.
Assigned enterprise risk ratings and mitigation recommendations supporting OCISO decisions.
Managed the ServiceNow development team supporting the assessment platform.
Director, Delivery
NetCentrics Supporting the United States Coast Guard
October 2023 – May 2024 Hybrid
Summary: Directed organizational governance across multiple NetCentrics cybersecurity programs by strengthening portfolio performance, operational maturity, CMMI alignment, and enterprise delivery capabilities.
Evaluated organizational maturity using CMMI principles.
Directed portfolio governance, Annual Operating Plans, and delivery strategy.
Partnered with HR and Talent Acquisition on workforce planning.
CGCYBER NOSC Program Manager
NetCentrics Supporting the United States Coast Guard
October 2018 – October 2023 Hybrid
Summary: Operational leadership of contractor support for the CGCYBER Network Operations and Security Center (NOSC), strengthening cyber defense operations, maintaining operational readiness, and mission execution across a Department of Defense Cyber Security Service Provider (CSSP).
Provided programmatic oversight of Incident Response, Cyber Analysts, Cyber Protection Team (CPT), and Cloud Security Analyst teams, overseeing staffing, onboarding, training, professional development, performance evaluations, timekeeping, and overall workforce readiness.
Improved SOC effectiveness by refining operational processes, standard operating procedures, and communication workflows.
Directed operational oversight of incident response, malware analysis, cyber threat analysis, cloud security operations, and CPT activities focused on identifying, analyzing, and responding to emerging cyber threats.
Evaluated operational controls, cybersecurity processes, and security practices to improve operational maturity and mission readiness.
Prepared operational metrics, after-action reports, executive briefings, and customer deliverables communicating cybersecurity operational performance, incident trends, mission readiness, and improvement recommendations.
Information Systems Security Officer (ISSO)
ISHPI Supporting the United States Coast Guard (USCG)
October 2011 – October 2018
Summary: Supported the United States Coast Guard Information Assurance Program by leading Certification & Accreditation (C&A) activities, conducting cybersecurity risk assessments, and guiding information systems through the security authorization process. Partnered with system owners, technical teams, and government stakeholders to ensure compliance with Department of Homeland Security (DHS), NIST, OMB, and Coast Guard cybersecurity requirements while supporting secure system deployment and ongoing operational readiness.
Led System Authorization efforts for Coast Guard information systems, guiding systems through the security authorization lifecycle from planning and risk assessment to Authority to Operate (ATO) approval.
Conducted cybersecurity risk assessments to identify security vulnerabilities, evaluate organizational risk, and recommend mitigation strategies supporting informed authorization decisions.
Developed and maintained System Security Plans (SSPs), Contingency Plans, Plans of Action and Milestones (POA&Ms), waivers, and supporting authorization documentation in accordance with DHS guidance and federal cybersecurity requirements.
Generated FISMA compliance documentation utilizing the Risk Management System (RMS) and Trusted Agent FISMA (TAF), supporting enterprise reporting and security authorization activities.
Contact this candidate