Roy Smith

About Roy Smith

Experienced and results driven Cybersecurity professional, recognized as change agent and subject matter expert in risk management, compliance, IT Governance and technology audit. Expert at ensuring compliance for Military and Federal Government environments and mission critical applications. Skilled and well versed in Federal Information Security Modernization Act (FISMA), National Institute of Standards and Technology Publications (800 Series), Payment Card Industry (PCI) Data Security Standards and other publications in support of security compliance.

Experience

1. Information Security Manager Director

   Cwt

   Jun 2009 — Present · Arlington, VA, US

   Serve as the principal Information System Security Officer for General Services Administration (GSA) E2 Solutions, FedRooms applications and several Department of Defense contracts Manage both technical and business information security issues ensuing necessary policies, processes and procedures are in place Conduct annual NIST 800-53 and 800-171 annual audit/assessments Perform annual FISMA audit/review updates internally and with subcontractor partners Create new security processes to communicate all security issues to external clients and internal customers Perform security reviews for enhancements and new projects within the organization Ensure compliance with contractual and task order requirements necessary to secure and sustain federal client agency business Manage remediation tracking with cross functional teams Conduct annual Incident Response and Disaster Recovery exercises Responsible for the vulnerability management program for customer facing federal government applications Work with DevOps and Cybersecurity teams in support of the company’s mission, organization and customer priorities Develop and manage Plan of Action and Milestones (POA & Ms) for identified vulnerabilities in support of Civilian and Department of Defense contracts Manage customer agency background checks for local and regional employees Responsible for Agency Interconnect Agreements (Memorandum of Understanding and Interconnect Security Agreement) and other pertinent contractual security documentation Support Payment Card Industry and SOC Assessment activities

Education

• Bowie State University

  Masters, Management Information Systems

• University of Maryland Eastern Shore

  BS, Business Administration