Irenaus Ibe

About Irenaus Ibe

A result driven ISSO with over 8 years experience in information Security with a documented history of leadership, responsibility and a passion for learning new concepts. Possessing in-depth knowledge in computer security, and various operating systems, applications and mixed platforms with a strong focus on Risk Management Framework in an effort to mitigate risk and vulnerability of a system. Proven track record of working effectively in a fast paced environment while consistently delivering quality outcomes.

Experience

1. Information System Security Officer

   S2i2, Inc

   Oct 2020 — Present · Alexandria, VA, US

   Implement the Risk Management Framework (RMF) in accordance with NIST SP 800-37. Performed Security Categorization (FIPS 199 & NIST SP 800-60), Privacy Threshold Analysis (PTA), E-Authentication with business owners and selected stakeholders. Documenting and reviewing security plans (SP), contingency plans (CP), contingency plan tests (CPT), privacy impact assessments (PIA), and risk assessment (RA) documents per NIST 800 guidelines for various government agencies. Initiated the authorization or re-authorization efforts and process for new or expiring systems and provided Information Assurance (IA) support for Certification and Accreditation (C&A) activities ensuring information systems obtain an Authority to Operate (ATO). Assessed and analyzed experience utilizing SCAP scans and ACAS/NESSUS scans. Developed and updated assessment and authorization documentation (Body of Evidence) for management and continuous monitoring of information systems as the System ISSO for various JSP systems. Used knowledge of the Information System (IS) and understanding of established Information Assurance requirements validate security policies and procedures outlined in the System Security Plan (SSP), customer policies & regulations, and ensure local policies are followed. Developed and refined Standard Operating Procedures (SOPs) that reflect the security operations of the technical environment. Performed security audits IAW established procedures. Developed process for the management, review, and retention of security audit data. Made decisions and implemented corrective action as required to resolve audit discrepancies. Develop NIST Compliant vulnerability assessments, technical documentation, and Plans of Action and Milestone (POA & M), and address system vulnerabilities.

Education

• Prince George's Community College

  Associate of Arts and Sciences (AAS), Business Administration and Management, General

  2002 — 2008

• Prince George's Community College

  Associate of Arts and Sciences (AAS), Accounting Transfer

  2002 — 2008

• Howard University

  Bachelor of Science (BS), Health Management

  2008 — 2013