Komlan Penassou
IT Security & FISMA Compliance
- Role
- Fisma Compliance Analyst Isso Rmf at 1prospect Technologies, Llc
- Location
- Towson, MD, US
- LinkedIn followers
- 500 followers
About Komlan Penassou
Accomplished Cyber Security Assurance Analyst with a Secret Clearance and 5 years of experience in data security and privacy. Currently seeking a new growth opportunity in Cyber Security role. Highly skilled in implementing industry recognized framework such as FISMA, NIST, FIPS, FEDRAMP. Competent in creating and maintenance of Plan of Actions and Milestones, A&A, Security Assessment report, Incident report plan,Configuration management Plan, and OMB to improve system security posture. Possesses extensive knowledge and understanding of security and backup procedure. Demonstrated ability to lead and direct, solve problems creatively and make strategic decisions in a fast-paced environments. Proficient working with Nessus, STIGS, eMASS, Confluence, SharePoint, MS Office, Outlook.
Experience
Fisma Compliance Analyst Isso Rmf
Oct 2022 — Present
Serve as the Information System Security Officer (ISSO) for Blood Management applications, ensuring compliance with FISMA and NIST standards.Utilize Fortify (SAST) to scan source code for vulnerabilities, ensuring secure application development and compliance with security standards.Collaborate with system administrators to manage configuration changes and review new application versions, tracking vulnerabilities and remediating weaknesses before production release.Conduct weekly reviews of over 600 audit events to identify and address abnormalities, improving system security posture.Perform system security categorization using FIPS 199 and NIST SP 800-60 guidelines to assign impact levels for confidentiality, integrity, and availability.Develop and maintain Certification and Accreditation (C&A) documentation, including System Security Plans (SSP), Contingency Plans, and Risk Assessment Reports.Analyze Nessus scan results to determine vulnerability impact levels and provide remediation actions through POA & M, reducing organizational risk.Assist System Owners and ISSMs with the Certification and Accreditation (C&A) process and continuous monitoring programs to ensure compliance with security policies.
Education
Thomas Edison State University
Bachelor's degree, electronics and technology
Find verified contacts for anyone on LinkedIn
Unifers gives sales teams verified emails and direct dials, enriched profiles, and outreach that lands in the inbox.
Free plan included · No credit card required
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.