John Heim

About John Heim

Information Systems Security Engineer delivering end-to-end GRC under the DoD RMF. I align systems to NIST controls and DoD policy, translating requirements into implementable designs and assessor-ready evidence. I pair strong writing/interpretation with hands-on engineering—scanning, artifact retrieval, and clean documentation—to drive practical, defensible decisions and continuous authorization.What I do:• RMF lifecycle: Categorize → Select → Implement → Assess → Authorize → Monitor• Controls into design: Map NIST SP 800-53 to architecture, data flows, and hardening baselines• Evidence & eMASS: Curate SSPs, POA & Ms, test results, and closure artifacts that withstand review• Scanning to action: Turn vuln/STIG findings into prioritized fixes, SOP updates, and change records• Continuous monitoring: Build metrics/dashboards and run reviews that keep ATOs healthyHow I add value:• Bridge policy language ↔ engineering reality with clear, defensible documentation• Reduce audit rework via clean artifacts, traceability, and right-sized tailoring• Improve resilience with repeatable hardening, timely remediation, and lessons-learned rollups• 10+ years of leadership experience, spanning over military and occupational environmentsISSE • RMF • NIST SP 800-53 • eMASS • SSP • POA & M • SCA • STIG • Vulnerability Management • System Hardening • Continuous Monitoring • ATO/ATO-with-conditions • Zero Trust • ACAS • GRC • SOP/Policy Development

Experience

1. Infantry Team Leader

   Army National Guard

   Jan 2020 — Present · West Orange, NJ, US

   Served as a team leader and operator within the Base Defense Operations Center (BDOC) in Syria, analyzing threat data and enhancing security protocols.• Trained and developed twenty leaders and operators in non-organic roles, ensuring operational readiness.• Collaborated with defense contracting SMEs to maintain critical systems and network infrastructure.

Education

• Post University

  Bachelor's degree, Computer Information Systems with a Cybersecurity Concentration

Skills

• Communication
• Direct Sales
• Microsoft Word
• Customer Service
• Research
• Accountability
• Microsoft Office
• Time Management
• Event Planning
• Microsoft Excel
• Powerpoint
• Client Relations
• Customer Engagement
• Client Rapport
• Problem Solving
• Leadership
• Consultative Selling
• Public Speaking
• New Client Prospecting