Anna Kissi

A highly motivated, solution-focused, and skilled IT Security Analyst with expertise in supporting traditional and cloud systems.

Experience in Risk Management Framework (RMF) standard, FedRAMP, ISO 27001, SOC-2 and CMMC. Proven ability to deliver excellence against hard deadlines on multiple projects with rapidly changing priorities. Excellent balance of communication, organizational, analytical, interpersonal, leadership and technical skills.

Information Security Compliance Engineer - Cisco - CA

(2025-04)

• Develop, implement, and maintain the company's information security policies and procedures.
• Manage the company's information security risk assessment process, including the reporting and oversight of treatment efforts to address negative findings.
• Lead ISO 27001 certification for the company, providing guidance and recommendations.
• Oversee the governance of IT-related projects and initiatives, ensuring alignment with security policies, best practices, and IT Risk Management principles.
• Prepare and complete documentation packages to include SOPs, policies, plans, templates, and manuals which address all ISO 27001 requirements.
• Conduct gap analyses and audits to ensure the organization adheres to regulatory requirements (like ISO-27001, SOC-2) and internal policies.
• Support the process of assessing and managing risks associated with third-party vendors and service providers.
• Manage risk and vulnerability assessments, validation testing, compliance reviews, and audits in accordance with NIST standards.
• Manage and support SOC 2 and global ISO 27001 audits.

Information Security Analyst - CDC

(2020-03 - 2025-03)

• Led Information System Security Authorization as the ATO Coordinator.
• Assessed Security Controls aligned with NIST 800-53/53A security standards.
• Delivered security status briefings to a technical team to facilitate ATO decisions.
• Conducted certification assessments to ensure compliance.
• Served as the principal advisor to the Information System Owner (SO), Business Process Owner, and the Chief Information Security Officer (CISO)/Information System Security Manager (ISSM) on security matters.
• Categorized system based on risk using FIPS 199, NIST 800-60 requirement.
• Validated POAMs with justifications for closure, provided comments, and recommendations as needed during closure reviews.
• Reviewed evidence of remediation, offering guidance and expertise where necessary.
• Generated and reviewed the System Security Plan annually.
• Provided expert advice to system stakeholders based on policies, procedures, standards, guidelines, and regulations, including National Institute of Standards and Technology (NIST) and the Federal Information Security Management Act (FISMA).
• Ensured systems were operated, maintained, and disposed of in accordance with internal security policies and practices outlined in the System Security Plan (SSP), Standard Operating Procedures (SOP), and customer directives.

IT Support Analyst Intern - Ministry of Finance

(2018-10 - 2020-01)

• Develop and confirm information security compliance/regulatory requirement as part of plan, implement, monitor, review and improve life-cycle process management.
• Review evidence for completeness
• Provide weekly status report to clients.
• Meet with external auditors to discuss evidence and gaps identified.
• Manage user account as per company policy.
• Provide technical assistance and support for computers and hardware both in person and over the phone.

M.Sc. - Cybersecurity Management - University of Maryland Global Campus

B.Sc. - Economics - University of Legon