Ferdinand Awumee

Cybersecurity professional with 5+ years of progressive experience in information assurance, Risk Management Framework (RMF), security control assessment, vulnerability management, and information systems security within federal environments. Extensive experience implementing and assessing NIST security controls, analyzing ACAS and DISA STIG findings, conducting risk assessments, and driving vulnerability remediation to strengthen organizational security posture. Proven expertise managing ATO processes, eMASS documentation, POA&Ms, continuous monitoring, and comprehensive security authorization packages in accordance with federal cybersecurity standards.

Accomplished security leader skilled in translating technical risks into actionable recommendations, advising stakeholders, and maintaining secure, compliant information systems throughout the system lifecycle.

Senior Information Assurance Analyst at U.S. Army (2024 – Present)

• Cybersecurity & RMF: Executed Risk Management Framework activities across system lifecycles, assessing security requirements, implementing controls, mitigating risk, and supporting successful Authority to Operate authorization.
• Vulnerability Management: Analyzed ACAS vulnerability scans and DISA STIG findings using STIG Viewer, identified security weaknesses, prioritized findings based on risk, and coordinated remediation actions with users.
• Security Control Assessment: Implemented, tested, and assessed cybersecurity controls in accordance with NIST SP 800-53, FIPS 199, FIPS 200, and NIST SP 800-60, identifying security deficiencies requiring corrective action.
• Security Assessments: Conducted security assessments, risk assessments, audits, and control testing across operational and development environments to identify threats, vulnerabilities, security exposures, and control gaps.
• POA&M & Risk Remediation: Developed Plans of Action and Milestones (POA&M), tracking vulnerabilities through remediation and partnering with System Owners, System Engineers, and ISSMs to drive timely closure.
• Continuous Monitoring: Performed continuous security monitoring, evaluating vulnerabilities, configuration changes, security controls, and emerging risks to maintain the organization's required cybersecurity posture.
• eMASS & ATO: Managed cybersecurity artifacts and authorization documentation within Enterprise Mission Assurance Support Service, ensuring security packages were prepared for assessment, validation, and ATO decisions.
• System Security & Compliance: Developed SSPs, SAPs, SARs, SIAs, PTAs, PIAs, and ISA/MOAs, documenting security requirements, assessment results, risks, interconnections, and compliance with federal cybersecurity standards.

Cybersecurity Analyst at U.S. Army (2020 – 2024)

• Security Control Assessments: Independently assessed cybersecurity controls through examination, interviews, and technical testing, identifying control deficiencies and recommending corrective actions to strengthen system security.
• NIST/RMF Compliance: Evaluated RMF documentation and security controls against NIST SP 800-53, 800-53A, 800-30, 800-37, and 800-39, ensuring alignment with federal cybersecurity requirements and organizational policies.
• Risk Assessments: Conducted system-level risk assessments, analyzed security exposures and control weaknesses, and developed risk assessment reports with actionable recommendations to reduce organizational risk.
• Security Posture Analysis: Evaluated system and configuration changes for potential impacts to cybersecurity posture, identifying emerging risks and recommending mitigation strategies before implementation.
• Vulnerability Remediation: Partnered with system and application owners to evaluate vulnerabilities, prioritize remediation activities, and drive corrective actions within established security timelines.
• Security Assessment Documentation: Reviewed Security Assessment Plans, System Security Plans, Contingency Plans, and Business Impact Analyses to ensure documentation reflected security controls and system requirements.
• Cybersecurity Advisory: Provided cybersecurity guidance to stakeholders and leaders, communicating security risks, vulnerabilities, control deficiencies, and remediation requirements to support informed risk-management decisions.

Security Operations Specialist at U.S. Army (2016 – 2020)

• Operations Leadership: Led and supervised teams in fast-paced operational environments, maintaining personnel readiness, accountability, performance, and compliance with organizational standards.
• Training & Development: Planned and delivered individual and team training, evaluated performance, and coached employees and junior leaders to improve proficiency and operational effectiveness.
• Asset Management: Managed accountability, readiness, and maintenance of vehicles, communications systems, equipment, and other high-value organizational assets.
• Logistics Coordination: Coordinated maintenance, equipment, inventory, and supply requirements to ensure resources were available and operational requirements were met on schedule.
• Operational Planning: Planned and coordinated personnel, equipment, schedules, safety requirements, and resources to successfully execute complex, time-sensitive operations.

Master of Science in Public Health – Columbia Southern University

Bachelor of Science in Public Health – American Public University

Bachelor of Science in Business Administration & Project Management – Columbia Southern University

Graduate Certificate in Occupational Safety & Health/Environmental Management – Columbia Southern University

Higher National Diploma in Civil Engineering – Cape Coast Polytechnic, Ghana