Charles Lanzer

About Charles Lanzer

IT Subject Matter Expert with over 20 years of key experience from Helpdesk to Management…

Experience

1. Information System Security Officer and Cyber Risk Management Specialist

   Oneida Innovations Group

   Jun 2019 — Present · United States Military Academy West Point, NY, US

   ISSO team lead for Risk Management Framework (RMF) activities and security operations to support system accreditation through to approval of an Authority to Operate (ATO) or Authority to Connect (ATC).• Interpret, review, and maintain Information Systems Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), and assessments in line with DoD policies.• Assist with Assured Compliance Assessment Solution (ACAS), Security Technical Implementation Guide (STIG) and Security Control Automation Protocol (SCAP) vulnerability assessments and provide recommendations of mitigation and remediation.• Document and ensure that Plans of Action and Milestones (POA & M) or remediation plans are in place into the Enterprise Mission Assurance Support Service (eMASS) system for vulnerabilities identified during risk assessments, audits, inspections, mitigation or remediation/compliance activities.• Provide insight and recommendations to the client on enforcement for conducting security and risk assessments using security NIST 800- 53 frameworks and DODI 8510.01 mitigating risk via security controls, testing and evaluation to certify and accredit commercial security products.• Providing guidance to the client utilizing NIST 800-171 for the protection of Controlled Unclassified Information (CUI) on commercial based network while adhering to Federal Information Processing (FIPS) device and network compliance.• Provide guidance and recommendation to the client utilizing NIST 800-137 for Information Security Continuous Monitoring after SCA-V and NETCOM assessments.•Documented the security controls and testing of those controls and helping emplace continuous monitoring capabilities for configuration, operations, and security of the system\'s infrastructure.• Support the transition to and operation under RMF 2.0 as directed by the Government for systems.• Assisted with 2 SCA-V audits and review from NETCOM to gain client a 3-year Authority to Operate (ATO) for the client

Skills

• Windows 7
• Sql
• Microsoft Exchange
• IT Infrastructure Operations
• IT Management
• Incident Management
• Dhcp
• Laptops
• Iis
• Windows
• Network Security
• Operating Systems
• Technical Support
• IT Operations
• Vendor Management
• Databases
• Antivirus
• Group Policy
• Dns
• Information Technology
• Oracle
• Firewalls
• System Administration
• Service Desk Management
• Active Directory
• Windows Server
• Hardware
• Switches
• Sharepoint
• Software Installation
• Tcp/Ip
• Vpn
• Security
• Sccm
• Bmc Remedy
• Network Administration
• Blackberry
• Software Documentation
• Disaster Recovery
• Computer Hardware