Dorine N.

Security Analysis Senior Specialist @NTT DATA North America

San Francisco, CA, US

Develop and implement risk management frameworks (RMF) to identify and mitigate information security risks in enterprise cloud systems and applications. Conduct security assessment and authorization (SA & A) activities to ensure compliance with industry regulations and standards including NIST SP 800-53 to maintain the Confidentiality, Integrity, and Availability of sensitive information. Coordinate and collaborate with Security Controls Assessors and complete annual reviews of security and privacy controls assessments.Create Plans of Actions and Milestones (POA & Ms) to track and remediate findings identified from self-assessments, independent assessments, and vulnerability assessments. Categorize information systems to determine the impact if Confidentiality, Integrity, and Availability (CIA) is breached. Create and maintain agency authorization packages including common controls packages and complete risk assessments of systems and their environments of operation while utilizing NIST RMF and the MITRE ATT & CK Frameworks. Manage access to FedRAMP provisional Authorization to Operate (ATO) packages of Cloud Service Provider approved cloud services for agency use.Participate in contingency and incident response activities including planning, training, and testing the effectiveness of the Plans. Drive innovation and efficiency in support of client’s cloud-based systems security and compliance efforts. Contribute to the development of standard operating procedures (SOPs) to streamline IT operations and improve overall security posture.

College of DuPage

Associate of Applied Science, Computer & Information Technology, Cybersecurity & Defense

University of Buea

Bachelor of Science - BS, Accounting and Business/Management