Benjamin Cronin

About Benjamin Cronin

I am a cybersecurity professional dedicated to helping organizations strengthen their security posture and maintain compliance in regulated environments. I specialize in guiding Cloud Service Providers (CSPs) through the Federal and State Risk and Authorization Management Programs (FedRAMP and GovRAMP), from initial readiness and gap assessments to full authorization and ongoing continuous monitoring.My experience spans:• Performing gap assessments against NIST SP 800‑53 Rev. 5 baselines and identifying tailored remediation strategies.• Developing and authoring complete FedRAMP documentation packages (SSP, ConMon Plan, ISCP, IRP, SCRMP, POA & Ms, FIPS 199 Categorization, and more).• Supporting continuous monitoring, annual assessments, and audit preparation to maintain long-term compliance.I also bring expertise in key information assurance frameworks, including NIST RMF, NIST CSF, and NIST SP 800‑171/CMMC, enabling me to support both federal and state agency requirements.Beyond my core advisory work, I am passionate about the intersection of cybersecurity and emerging technologies, particularly how AI and large language models (LLMs) can drive innovation and efficiency within compliance and risk management practices.

Experience

1. Senior Cybersecurity Associate Ii

   Secureit

   May 2023 — Present · Reston, VA, US

   Lead comprehensive gap assessments against FedRAMP baselines, conducting interviews across all 18 NIST 800-53 control families to evaluate implementation maturity and compliance readiness.• Identify control implementation gaps and deliver tailored remediation guidance to accelerate FedRAMP authorization readiness.• Develop and populate complete FedRAMP SSP (Front Matter and Appendices A–Q)- e.g. Incident Response Plan (IRP), Information System Contingency Plan (ISCP), Configuration Management Plan (CMP), Supply Chain Risk Management Plan (SCRMP), and Continuous Monitoring (ConMon) Plan, etc.• Provide post-authorization support, ensuring customer compliance with FedRAMP continuous monitoring (ConMon) requirements and facilitating annual assessment readiness.• Lead technical discussions with DevSecOps and software development teams while delivering executive-level briefings to C‑Suite stakeholders, translating complex cybersecurity findings into actionable business decisions.• Support and lead FedRAMP annual assessment audits, facilitating interviews, evidence reviews, and assessment result validation for FedRAMP-authorized systems.• Advise Federal and State agencies on FISMA/NIST RMF requirements, including NIST SP 800‑53 Rev. 5, aligning internal systems and state-specific compliance standards to federal security frameworks.

Education

• James Madison University

  Bachelor’s Degree, Health Services Administration

  2012 — 2016

• Georgetown University

  Master of Professional Studies, Cybersecurity Risk Management

  2019 — 2023

Skills

• Event Planning
• Microsoft Word
• Team Leadership
• Cisco Webex
• Leadership
• Data Analysis
• Marketing Plan Creation
• Inside Sales
• Teamwork
• Microsoft Excel
• Social Media
• Public Relations
• Identity Management
• Clinical Conductor
• Salesforce.com
• Adobe Creative Suite
• Customer Service
• Marketing
• Innovation
• Cyber Security
• SEO
• Microsoft Office
• Sales
• Public Speaking
• Research
• Lead Generation
• Social Media Marketing
• Computer Security
• Cyber-Security
• Secure Mobility
• Strategic Planning
• Customer Satisfaction
• Salesforce
• Google Docs
• Time Management