Leonard Rivera

About Leonard Rivera

My goal is to work as a Chief Information Security Officer (CISO) for a public entity. I want to put my experience and education to work protecting critical infrastructure and public information at the state or local level. I am a mission-orientated and results-driven Cybersecurity leader with broad-based technology experience, and hands-on technical, and project management skills. MAJOR ACCOMPLISHMENTS • Led (16) week 1.5 M CMMC assessment and readiness engagement to create a federally regulated business strategy for a multi-billion-dollar international logistics company that supports Defense Industrial Base (DIB) contracts, adhering to DFAR, ITAR, and CUI compliance standards. • Led over (8) months of client engagement providing GRC support for federal research business CMMC level 2 assessment readiness, including policy and procedure review, and presentation preparation. • Led NIST/FISMA security control assessment of the Marine Corps Intelligence Activity (MCIA) Physical Access Control System (PACS), Operations security Tasking Management System (OTMS) II, Intelligence Community Interoperability Badging System (ICBIP) in accordance with the Director of Central intelligence guidance. • Led the creation of the MCIA SCI Security Control Assessor (SCA) Standard Operating Procedures (SOP) and templates. • Led development of (13) SCI Enterprise Operation (SEO) Information Assurance (IA) projects, and the review of (53) SEO IA directives, security plans, procedures, Concept for Operations (CONOPS), and standards necessary to maintain enterprise information assurance. • Created and submitted NIST ATO packages and supporting documentation for all II MEF SCI intelligence systems. • Developed (21) security system projects, including a high-level Pentagon SCI project. • Conducted NIST SP 800-53A security control testing and assessment of MARFORRES, and MCIOC for JWICS ATO. • Managed communication SIPRNET systems and architecture to support intelligence operations. • Provided JWICS SSP support for the Marine Corps Information Operations Center (MCIOC) in developing according to Director of National Intelligence directives and NIST standards. Honorably retired from the United States Marine Corps Over 17 years of experience in information technology and cybersecurity

Experience

1. Assistant Director of Information Technology

   Texas A&M University System

   Oct 2022 — Present · College Station, TX, US

   Provide expert strategic guidance and implementation support to successfully implement the CUI Program to attain Cyber Security Maturity Model Certification (CMMC) for academic research. Provide expert knowledge of best practices and implementation strategies of NIST SP-800-53 r5 Security and Privacy Controls for Information Systems and Organizations, NIST SP-800-171 r2 Protecting Controlled Unclassified Information in Nonfederal Systems, and NIST SP 800-37 Risk Management Framework (RMF). Provide expertise in the area of Governance, Risk & Compliance (GRC) support to develop CUI compliance environment documentation System Security Plan (SSP), Plan of Action & Milestone (POA & M), and FedRAMP Authority to Operate (ATO) documentation. Provide expert advice for Microsoft Azure Government implementation to support CUI and CMMC level 2.

Education

• Texas A&M University

  Bachelor’s of Science Degree, Leadership, Graduated

  2017 — 2018

• Texas A&M University - The Bush School of Government and Public Service

  Master of Public Administration - MPA, Cybersecurity Policy

  2019 — 2021

• Saint Leo University

  Associate of Arts (AA), General Studies

  2003 — 2005