Idalia Ortiz

About Idalia Ortiz

Cybersecurity Manager with over 20 years of experience in establishing comprehensive/enterprise IT security programs for Federal initiatives with adherence to the Federal Information Modernization Act (FISMA) and the National Institute of Standards and Technology (NIST) Special Publications. Her experience includes leading teams to establish Federal Chief Information Security Officer (CISO) programs, large-scale Zero Trust implementations, strategic planning, cyber security guidelines development, and cyber maturity assessments. Her main areas of focus is end to end security of the System Development Life Cycle (SDLC), Identity Management for Federal agencies in addition to activities supporting Authority to Operate processes (ATO), particularly under the NIST SP 800-37 rev 2 Risk Management Framework (RMF) leveraging NIST SP 800-53 rev 5 and NIST SP 800-63 among others. She is an expert in developing and maintaining system security documentation, security control baselines, system security risk assessments and corresponding mitigation plans. Idalia possess excellent project management skills, the ability to drive and meet aggressive deadlines, and enhance the security posture of highly scalable and fault-tolerant applications. She excels in a customer service environment and possesses great communication skills with a strong work ethic, strong interpersonal skills and is devoted to the team and mission. Skills Profile · Secret Clearance. Zero Trust Architecture. Supply Chain Risk Management · Understanding of Agile and Scrum methodologies · Tableau · RPA · Federal Risk and Authorization Management Program (FEDRAMP) · Federal Cloud Computing Strategy (FCCS) · Veterans Preference: VRA, VEOA · Federal Information System Management/Modernization Act (FISMA) · NIST Risk Management Framework (RMF) · Department of Homeland Security Continuous Diagnostics and Mitigation (CDM) · Federal Information Processing Standards (FIPS) 199, 200 · Information System Continuous Monitoring (NIST SP 800-137 / NISTIR 8011) · Federal Information Technology and Acquisition Reform Act (FITARA) · Office of Management and Budget Circular A-130, Management of Federal Information · Splunk · Office of Management and Budget Circular A-123, Management Accountability and Control · The Privacy Act of 1974 · HIPAA Compliance · The E-Government Act of 2002 · Cybersecurity Asset Management (CSAM)

Experience

1. Risk and Advisory Manager

   Deloitte

   Jun 2020 — Present

Education

• Northcentral University

  Doctor of Philosophy - PhD

• University of Maryland Global Campus

  Bachelor of Science - BS

• Strayer University

  Master of Business Administration - MBA