Denise Tawwab

WORK HISTORY

EDUCATION

SKILLS

ABOUT DENISE TAWWAB

I am a Cybersecurity Manager, IT security trainer, technical writer, data wrangler, speaker, and consultant. I teach businesses to use the NIST Risk Management Process and Framework and I show business leaders how to develop an integrated, organization-wide Information Security Risk Management program (complete with policies, procedures, standards, guidelines, and training) and how to ensure that they can meet applicable compliance requirements and pass a variety of compliance audits.• IT security, audit and risk management.• Information Security risk management and governance experience.• Experience developing and documenting policies, procedures, standards, and guidelines.• Information security risk management, • Conducting Risk Assessments.• Applying the NIST Risk Management Framework to Information Systems and Organizations.• ITIL Foundations and ITSM metrics (KPIs, CSF).• System Development Life Cycle (SDLC)• Privileged Account Management• Strong verbal and written communication skills.• Able to elicit, document, and communicate security, technical, functional and non-functional requirements, business processes, data flows, project objectives, and KPIs.• Able to manage multiple tasks in a fast-paced, demanding work environment.• Strong analytical and problem-solving skills.• Expert at Data Analysis and Data Visualization using Power BI, Tableau, and Splunk• Familiar with cloud service models, cloud deployment models and security considerations for moving work to a cloud environment (IaaS, PaaS, SaaS)KNOWLEDGABLE-BlockchainFedRAMPFIPS 199FIPS 200NIST SP 800-39 Risk ManagementNIST SP 800-37 Risk Management FrameworkNIST SP 800-30 Risk AssessmentNIST SP 800-53 Security and Privacy ControlsNIST SP 800-53A Assessing Security and Privacy ControlsNIST SP 800-18 System Security PlansData PrivacyTableau Power BICamtasia