John Dossa

About John Dossa

Experienced Information Assurance (IA)/Security (INFOSEC), Governance, Risk, and Compliance (GRC), Audit, DIACAP, RMF, Privacy & Compliance Professional• 24+ years of experience in a wide variety of information security related functions including: DoD 8140/8570 IAM level (CISSP), Assess & Authorize (A&A), vulnerability management, risk mitigation, project management, security training, Configuration Management (CM), Computer Security (COMPUSEC), Communications Security (COMSEC), Operational Security (OPSEC), Industrial Control System (ICS) and DISA/DoD/Major Command (MAJCOM) compliance reviews• Knowledge and training in: NIST Risk Management Framework, AFI17-101 (Cybersecurity), eMASS, DIACAP, Cisco IPS, McAfee CISCO CCNA, CISCO CCNA Security, Advanced Computer Forensic Analysis and Incident Response, ePO & Enterprise Firewall, SharePoint, ACAS, and TEMPEST

Experience

1. Cybersecurity Lead Information Systems Security Manager (Issm)

   Amentum

   Jan 2021 — Present · Panama City, FL, US

   As the Cybersecurity Lead, establish and foster relationships with the critical mission owners. ISSM for multiple Aerial Target Systems (supporting Tyndall\'s QF-16 drones). Lead and guide ISSOs, SysAdmins, Engineers, and Software (SW) Developers to secure those essential mission systems. I reached 100% Compliance of assigned systems in 1 year. In Step 6 of Risk Management Framework (RMF), mitigation & upgrades. Recently, certified mission SW to APL/EPL.Responsible for the development of a comprehensive security plans I.E. TEMPEST, Computer Security (COMPUSEC), practices & procedures for IT systems security. Implement & maintain security controls in accordance with (IAW) the DoD and USAF policies.Research, develop, implement, test & review, organization\'s information security in order to protect information and prevent unauthorized access. Instruct users about security measures, explain potential threats, install software, implement security measures & monitor computer systems/networks. Develop, author and approve all Cybersecurity instructions.Gather data necessary to maintain security & establish functioning external barriers like firewalls, Cross Domain Solutions (CDS), etc.Participate in all facets of the RMF process on assigned systems. Define, create & maintain the documentation for assessment of each system IAW government requirements. Assess & Authorize the impacts on system modifications and technological advances. Review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, implement changes and document upgrades. Work with the systems configuration control authorities for needed implementations & documentation changes/additions. As a part of monitoring systems, ensure periodical scans of systems referencing the latest vulnerability Security Technical Implementation Guide are performed. Formulate reports on scans and provide the requested results to the appropriate authorizing authority.

Education

• Lake Weir High School

  High School, High School/Secondary Diplomas and Certificates

  1992 — 1996

• Community College of the Air Force

  Associate’s Degree, Military Information Systems Technology

  2010 — 2016

• Trident University International

  Master of Technology - MTech, Information Technology Project Management

  2017 — 2018

• Southern Illinois University, Carbondale

  Bachelor’s Degree, Workforce Development and Training

  2004 — 2016

Skills

• Information Technology
• Firewalls
• IT Audit
• Firewall
• Information Security
• Ccna
• Comsec
• Business Planning
• Start Ups
• Public Speaking
• Military Training
• Training
• Quality Auditing
• Defense
• New Business Development
• Information Security Awareness
• Microsoft Excel
• Project Management
• Host Based Security System
• Customer Service
• Team Building
• Management
• Security Awareness
• Marketing Strategy
• Coaching
• Training & Development
• Intrusion Detection
• Security
• Video Teleconference
• Marketing
• Assured Compliance Assessment Solution Acas
• Leadership
• Microsoft Office
• Military
• Afrims
• U.s. Department of Defense
• Computer Security
• Cyber-Security
• Continuous Improvement
• Information Technology Equipment Custodian Itec