John Dowd

About John Dowd

A seasoned Information Security Professional, John works successfully within the challenging and complex Information Technology Information Security areas working with the National Institute of Standards and Technology (NIST) standards for Federal Information Systems (FISMA 800-53)and DFARS (800-171), the Federal Risk and Authorization Management Program (FedRAMP) for Cloud Service Providers, IRS publication 1075 - Tax Information Security Guidelines for Federal, State and Local Agencies (Pub 1075), the North American Electric Reliability Corporation (NERC) standards for Critical Infrastructure Protection (CIP) for Utilities. John’s areas of expertise and focus are on Risk Assessment and Information Security Advisory services in the Federal, State, Healthcare, and Utility sectors, and FedRAMP 3PAO certification support services.Specialties: FedRAMP, FISMA NIST 800-53, PII / PHI, HIPAA, NERC CIP, Certification and Authorization (C&A), Security Assessment & Authorization (SA & A), Plan of Action and Milestones (POA & M), Security Awareness Training, Sensitive and Privacy Information (SI/PII), Privacy Impact Assessment (PIA), System Security Plan, Contingency Plans, Contingency Plan Testing, Risk assessment (RA).

Experience

1. Director, Infrastructure and Operations

   WSP in the U.S.

   Dec 2016 — Present · Denver, CO, US

   Promoted from Information Systems Security Manage. Guide Stakeholders in practical implementation of policies and procedures to adhere to FISMA/NIST 800-53 guidelines. Ensuring that Stakeholders adhere to policies and procedures to acquire and maintain an Information System\'s Authority to Operate (ATO) under FISMA following NIST 800-53 guidelines and NIST 800-53a security controls assessment practices. Guide systems engineering design and development toward a \"baked-in\" security design using Information Assurance best practices as well as FBI-specific policies and guidelines. Guide engineering development for the security design using IA enabled products. Maintain up to date documents such as procedures, work instructions, plans and manuals.

Education

• University of California, Davis

  BA, Economics

  1982 — 1984

Skills

• Management
• Software Development
• Testing
• Vulnerability Assessment
• Integration
• IT Management
• Nerc Cip
• Information Technology
• Security
• Risk Assessment
• Cissp
• Disaster Recovery
• Contingency Planning
• Firewalls
• Fedramp Certification
• Cloud Computing
• Regression Testing
• Information Security
• Security Audits
• Nerc
• Hipaa
• Security Awareness
• Information Security Management
• Consulting
• Tcp/Ip
• Program Management