Kelsey McMichael

About Kelsey McMichael

IT Security and Privacy Leader with 14+ years of experience in risk management, compliance, and cybersecurity. Skilled in leading teams, streamlining processes, and driving security strategies with expertise in FISMA, NIST, ISO 27001, SOC 2, HIPAA, and GDPR. Trusted to manage and protect highly sensitive information, with Top Secret clearance demonstrating the integrity required to handle classified data while enhancing security posture and mitigating risks. Proven ability to implement Lean-Agile methodologies and optimize security operations using cutting-edge SIEM, vulnerability management, cloud security, and risk assessment tools. Proven track record of reducing operational overhead, streamlining compliance processes, and fostering security awareness across organizations. Experienced in aligning security frameworks with business goals, advising senior leadership, and mentoring teams to ensure adherence to standards such as FISMA,NIST, GDPR, HIPAA, and FedRAMP.Experienced in guiding organizations through the FedRAMP authorization process for SaaS solutions, including securing FedRAMP authorization to ensure compliance with security and privacy standards. Demonstrated expertise in managing cloud security controls, ensuring SaaS offerings meet FedRAMP security baselines, and supporting Third-Party Assessment Organizations (3PAOs) during the ATO process.Passionate about enabling organizations to build trust through robust security and compliance programs. Adept at managing governance, risk, and compliance in high-stakes environments, and collaborating with stakeholders to enhance organizational resilience.Specialties: FedRAMP Sponsorship | SaaS Security Compliance | GRC Leadership | Risk Management | Security Frameworks (SOC 2, ISO 27001, FISMA, NIST, FedRAMP)| Privacy Compliance | Team Mentorship | Cross-Functional Collaboration | Security Strategy

Experience

1. Systems Security & Privacy Officer Compliance Supervisor

   Centers for Disease Control and Prevention

   Jan 2023 — Present

   As the Systems Security and Privacy Officer at the National Institute for Occupational Safety and Health, I led a team of 25 professionals dedicated to protecting sensitive information and ensuring compliance with FISMA, NIST, HIPAA, the Privacy Act, and GDPR. I focused on mentoring Security and Privacy Officers, developing robust security and privacy policies, and implementing training programs that align with federal and industry standards.My role involved proactively managing incident response, coordinating breach reporting, and mitigating security risks to safeguard organizational data. I also worked closely with senior leadership, providing strategic guidance on security initiatives, delivering compliance reports, and fostering cross-functional collaboration to strengthen our overall security and privacy framework.

Education

• GMC - Georgia Military College

  Associate of Science - AS