Waqar Sultan

About Waqar Sultan

Cybersecurity professional with an active Top Secret DoD clearance and advanced…

Experience

1. Information Risk Specialist

   Booz Allen Hamilton

   Sep 2022 — Present

   Implemented and maintained the Risk Management Framework (RMF) for various projects, ensuring compliance and security standards were met.• Managed and maintained HIPAA-compliant policies and procedures, safeguarding PHI and PII.• Assisted in developing and implementing data privacy policies and procedures to ensure compliance with PHI, PII, HIPAA, and other regulatory requirements.• Draft, review, and update Risk Management Framework (RMF) artifacts required for FISMA. • Conducted comprehensive risk assessments to identify potential threats, vulnerabilities, and impacts, resulting in a 30% reduction in vulnerabilities.• Developed and implemented security controls based on NIST SP 800-53 guidelines and industry’s best practices.• Conducted regular audits and assessments to identify potential data privacy risks and recommended mitigation strategies.• Wrote security policies and documentation for DoD major applications, enhancing governance and compliance.• Maintained documentation and records related to the RMF process, security controls, and compliance activities.• Experienced in conducting risk assessments and audits to identify potential privacy and security vulnerabilities• Provided information security reporting including security metrics as required.• Tracked, reported, and provided recommendations on Plan of Action & Milestones (POA & M).• Knowledge of testing tools such as Nessus/ACAS, SCC, DISA STIGs / STIG Viewer, etc.• Collaborated with cross-functional teams to ensure continuous Authorization to Operate (ATO) for major DoD applications, contributing to uninterrupted mission support and system compliance.• Used Splunk to monitor and analyze system logs for security events, supporting incident detection and improving visibility into potential threats across enterprise systems.• Conducted Privacy Impact Assessments (PIAs) and System Security Plans (SSPs), aligning documentation with FISMA and HIPAA requirements to strengthen audit

Education

• Montgomery College

  Associate's degree, Management Information Systems, General

• Western Governors University

  Master of Science - MS, Cybersecurity and Info Assurance

• Towson University

  Bachelor of Science - BS, Information Technology