Hans Bongmba

Information Security professional with 10+ years of experience in cybersecurity, risk management, and privacy processes. Expertise includes information security operations, risk assessment, compliance support, and security documentation. Proficient in analytical problem-solving and reporting security metrics. Supported A&A packages, ATO maintenance, control testing, and remediation tracking across multiple systems while reporting security and privacy metrics and reviewing third-party risks.

Security Analyst - Verlarion Analytica LLC

(2021-10)

• Assisted in the preparation and maintenance of security Assessment and Authorization (A&A) documentation, including System Security Plan (SSP), Risk Assessment Report (RAR), Security Controls Traceability Matrix (SCTM), and tracking of Plan of Actions and Milestones (POA&Ms).
• Supported the Information Systems Security team in maintaining Authorization to Operate (ATO) approvals for multiple systems, ensuring compliance with the Risk Management Framework (RMF).
• Monitored and evaluated the security posture of information security policies and procedures related to FISMA, FedRamp, and ISO 27001, ensuring adherence to regulatory standards.
• Utilized a dashboard system to report on key security metrics, risks, and compliance requirements, while developing remediation strategies to address identified vulnerabilities.

Security Control Analyst - SAF Medical

(2016-05 - 2021-09)

• Prepared and reviewed System Security Plans (SSPs), Security Assessment Reports (SARs), Security Assessment Plans (SAPs), and Plans of Actions (POAMs) to support Authorization to Operate (ATO) packages in compliance with NIST 800-53 and NIST 800-37.
• Conducted security testing and analyzed results to document risks and countermeasures, enhancing the control environment through internal audits.
• Documented actionable findings and recommendations, ensuring clarity and specificity for stakeholders and auditors.
• Developed and executed disaster recovery and business continuity tests, improving recovery processes and organizational resilience.
• Utilized a dashboard system to track key security metrics, risks, and compliance requirements, facilitating informed decision-making.

B.Sc. - Economics Sciences (2005-09 - 2008-06)