Amy Mey-Zappen

Cybersecurity and Governance, Risk & Compliance (GRC) professional with experience supporting Department of Defense information systems through the full Risk Management Framework (RMF) lifecycle. Skilled in security control assessments, compliance testing, POA&M management, continuous monitoring, vulnerability remediation, and collaboration with technical and business stakeholders. Experienced supporting on-premises and AWS GovCloud environments in accordance with NIST SP 800-53 and DoDI 8510.01.

Information System Security Engineer (ISSE) at Naval Undersea Warfare Center (2022-01 – Present)

Support GRC activities for DoD information systems using the NIST Risk Management Framework.

• Manage the cybersecurity lifecycle for approximately 10 information systems annually as part of a 50-system portfolio.
• Conduct security control assessments and document assessment procedures, findings, and test results.
• Develop and maintain RMF authorization packages supporting Authority to Operate (ATO) decisions.
• Create and maintain POA&Ms while partnering with system owners to prioritize and track remediation efforts.
• Collaborate directly with system owners, ISSMs, ISSOs, Cyber Operations personnel, and technical teams.
• Support continuous monitoring, STIG compliance, vulnerability remediation, and AWS GovCloud security activities.
• Participate in cybersecurity audit walkthroughs and serve as RMF Assistant Team Lead.

Personal Assistant at Anda Partridge Group (2021-01 – 2022-12)

Vice President / Women's Director at Stop It Goaltending (2013-01 – 2021-12)

Sales Producer at Allstate Insurance (2012-01 – 2013-12)

M.S. in Administration of Justice & Homeland Security (Cybersecurity & Intelligence) – Salve Regina University (2022-01)

B.A. in Criminal Justice, Minor in Communications – Saint Anselm College (2012-01)