Nana D

Senior Grc Analyst @Internal Revenue Service

Led formal risk assessments and authored A&A documentation to support RMF and ATO processes.• Conducted vulnerability scans and remediation using Nessus Tenable; performed SCAs to ensure FISMA/NIST compliance.• Architected secure AWS IAM roles, SCPs, and multi-account structures—reducing over-privileged access by 40%.• Executed access reviews, CloudTrail audits, and POA & M updates via ServiceNow to enhance cloud posture.• Facilitated ISCP/DRP/IRP exercises and integrated lessons learned into updated resilience plans.• Reviewed system categorization docs (FIPS 199, SSP, SAR, PTA) and ensured alignment with NIST 800 series.• Supported FDIC CM team by validating products against TRM and managing Technical Inserts.• Streamlined audit coordination with OIG, 3PAO, and internal teams—ensuring timely evidence delivery.• Implemented a custom Jira workflow for cross-functional issue tracking, improving resolution speed and visibility.