Manager GRC Manager

Summary

A motivated Cybersecurity professional with great skills in conveying complex technical information clearly and
concisely. I have a great understanding of security policy implementation and enforcement. I have obtained extensive
skill and knowledge in Security Assessment and Authorization, the Risk Management Framework (RMF), Systems
Development Life Cycle (SDLC), security life cycle and vulnerability management using FISMA standards. I have a knack
for working well with others to achieve a common goal.

Expectations

I am an effective leader with innovative Cybersecurity professional with business-level strategic skills in conveying complex technical information clearly and concisely to both technical and non-technical audience. I have a great understanding of security policy implementation and enforcement. I have obtained extensive skill and knowledge in Security Assessment and Authorization, the Risk Management Framework (RMF), Systems Development Life Cycle (SDLC), security life cycle and vulnerability management using NIST, FISMA, OMB and industry best Security practices. I have a knack for working well with others to achieve a common goal.

Employment Preferences

Expected Base Salary

**0,000 USD

Academic Degree

Experience

Skills

• FISMA Act 2002
• Risk Management Framework
• RMF
• NIST CSF
• NIST SP 800 Series
• FedRAMP
• Security Control Testing
• Validation.
• IT General Controls
• ITGC
• Auditing.
• ServiceNow Security
• Cloud Security
• Policy Development
• Updating
• PCI DSS
• HIPAA
• Sarbanes Oxley
• SOX
• ISO 2700X
• Business Continuity
• Disaster Recovery Planning.
• Authorization
• Assessment
• POA&M Management
• SOC 1
• SOC 2 Auditing.
• Threat
• Vulnerability Management
• System Development Lifecycle
• SDLC
• Vendor Risk Assessment