Paul MacDonald

Security Delivery Associate Manager @Accenture Federal Services

Tampa, FL, US

Develop or modify implementation and design documents describing how security features are implemented-Create and maintain existing information system security documentation, includingSystem Security Plan (SSP), Security Controls Matrix and or Assessment, and Security Configuration Guide controlled changes to the system)-Work in close coordination with all system stakeholders-Prepare system documentation for assessment in accordance with the Risk Management Framework (RMF) and NIST Special Publications (800-37, 800-53 and others); identify deficiencies and provide recommendations for solutions-Ensure all users have the requisite security clearance, authorization, need-to-know, and are aware of their security responsibilities before being granted access to the system, and periodically thereafter-Conduct periodic and continuous reviews of the system to ensure compliance with the authorization package-Work with the Information Assurance (IA)team to perform basic system administration and maintain various IA tools, including audit collection and reporting systems, vulnerability management programs, and other continuous monitoring capabilities-Participate in the change management process, including reviewing Requests for Change (RFC) and assist in the assessment of a potential change\'s security impactImplement vulnerability management programs, including tracking addressing IAVAs and security patches, accessing applicability to existing systems, and ensuring closure -Create and track software certifications-Knowledge of and experience with Federal security regulations, standards, and processes including FISMA, FIPS, NIST, and FedRAMP-Current on the latest cyber security policies and regulations-RMF Certification expert via the use of eMASS and XACTA