Joe Black

Cybersecurity and GRC professional with 15+ years of experience supporting enterprise security, regulatory compliance, risk management, Assessment & Authorization (A&A), and security control governance. Experienced with NIST SP 800-53, NIST SP 800-171/DFARS, CMMC, IRAMP, SOX and PCI requirements. Skilled in using Archer as a centralized system-of-record for security documentation, risk and audit readiness, while partnering across technical and business teams to strengthen control effectiveness and enterprise security posture.

Senior Security Analyst - Raytheon

(2009-03)

• Led Governance, Risk and Compliance activities supporting Assessment & Authorization of information systems using NIST SP 800-53 and NIST SP 800-171 frameworks.
• Evaluated regulatory compliance, security controls and risk-management requirements across enterprise environments.
• Used Archer as the centralized system security record repository to improve documentation, reporting, traceability and audit readiness.
• Supported development and implementation of security policies and procedures aligned with regulatory and organizational requirements.
• Applied security and risk-assessment experience to identify control weaknesses and support risk mitigation.
• Partnered with security operations and technical support teams to connect operational security findings with compliance and risk requirements.

Senior Security Analyst - Michaels Arts & Craft

(2007-08 - 2009-03)

• Supported identity-management and log-aggregation initiatives designed to strengthen access governance and compliance reporting.
• Installed, configured and administered Consul event/log aggregation capabilities to automate SOX compliance reporting.
• Monitored security and compliance technologies including LogLogic, Tivoli TCIM, Qualys, CounterSpy and Control SA.
• Coordinated project progress and technical activities with customer and implementation teams.

IT SOX Consultant - Tatum LLC

(2007-05 - 2007-08)

• Created a Procedure Control Manual for Panda Ethanol using existing business processes and SOX 404 control requirements.
• Performed mid-year IT SOX and application-control testing for Silverleaf Resorts to prepare the organization for year-end SOX testing.

Master of Information System Technology - Security Emphasis - South University (2012)

Bachelor of Science - Management Information Systems - University of Texas at Dallas (1990)