Martin Onuorah

Information System Security Officer (ISSO) with 8+ years of Information Technology experience and 5 years supporting Department of Defense (DoD) and Federal cybersecurity programs. Extensive experience managing Risk Management Framework (RMF) activities, Assessment & Authorization (A&A) efforts, continuous monitoring, vulnerability management, and security compliance initiatives throughout the system lifecycle. Skilled in developing and maintaining ATO packages, conducting security control assessments, managing eMASS documentation, and implementing NIST 800-53 security controls.

Experienced in developing cybersecurity policies, procedures, and governance documentation, performing risk assessments, and collaborating with system owners, engineers, and executive stakeholders to strengthen security posture and support mission objectives.

Information System Security Officer (ISSO) - TEKsystems

(2024-06)

• Supported security authorization efforts for multiple federal information systems by developing and maintaining RMF artifacts including SSPs, SARs, POA&Ms, and ATO packages.
• Evaluated DISA STIG compliance across Windows, Linux, database, and application environments, reducing security findings and strengthening overall system posture.
• Translated technical vulnerability scan results into executive-level risk assessments, enabling informed risk-based authorization decisions.
• Participated in configuration management and change control reviews, assessing security impacts and ensuring compliance with federal cybersecurity requirements.
• Reviewed and validated security controls supporting Authority to Operate (ATO) decisions for mission-critical systems.
• Developed and maintained cybersecurity policies, procedures, and standards aligned with NIST 800-53, FISMA, RMF, and organizational security requirements.
• Collaborated with System Owners, ISSMs, ISSEs, Engineers, Program Managers, and System Administrators to resolve cybersecurity findings and maintain authorization status.
• Conducted enterprise risk assessments, DISA STIG reviews, and vulnerability assessments, driving remediation efforts and improving compliance with NIST 800-53 requirements.
• Continuous monitoring and Information Assurance activities, ensuring timely remediation of vulnerabilities, maintaining eMASS documentation, and supporting RMF compliance.
• Assessed NIST SP 800-53 security controls to evaluate control effectiveness, identify compliance gaps, and support ATO and continuous monitoring activities.
• Developed security control policies, procedures, and implementation plans from the ground up, ensuring alignment with RMF, NIST 800-53, and organizational cybersecurity requirements.
• Utilized RMF and FISMA compliance tools to manage ATO packages, POA&Ms, continuous monitoring activities, and ongoing authorization requirements.
• Managed PPSM requests, registrations, and approvals, ensuring compliance and supporting RMF authorization and continuous monitoring activities.
• Maintained RTS records and asset inventories to support vulnerability management, configuration management, and cybersecurity reporting requirements.

Information System Security Officer (ISSO) - Cornerstone - Sandy, UT

(2022-10 - 2025-04)

• Supported Security Control Assessments (SCAs) and Assessment & Authorization (A&A) activities, including documentation, reporting, and risk analysis.
• Developed and maintained A&A artifacts including SSPs, SAPs, SARs, POA&Ms, Risk Assessments, and Sensitivity Assessments.
• Developed Rules of Engagement (ROE) documentation to support vulnerability assessments and security testing activities.
• Developed, reviewed, and maintained SSPs, Contingency Plans, Disaster Recovery Plans, Incident Response Plans, and Configuration Management documentation.
• Conducted Security Test & Evaluation activities, assessed security controls, documented findings, and reported weaknesses through Security Assessment Reports.
• Reviewed and maintained security documentation including Privacy Impact Assessments (PIAs), Risk Assessments (RAs), and security plans.
• Performed continuous monitoring, Security Control Assessments, and internal audits to maintain authorization and compliance readiness.
• Performed vulnerability assessments using industry-standard tools, identified root causes of security findings, and recommended remediation strategies.
• Conducted DISA STIG compliance reviews of operating systems, web servers, and databases to strengthen security posture.
• Applied FedRAMP and NIST 800-53 guidance to support cloud security, risk management, and compliance initiatives.
• Conducted technical reviews of new and existing systems, identifying security gaps and recommending mitigation strategies to achieve compliance.

Oracle Database Administrator - TATA CONSULTING SERVICES - Pennsylvania

(2019-09 - 2022-08)

• Managed Oracle 10g, 11g, and 12c databases across production, development, and test environments.
• Performed database backup and recovery operations using RMAN, Data Pump, and Export/Import utilities to ensure data availability and business continuity.
• Executed database upgrades, migrations, refreshes, and data transfers between development, QA, and production environments.
• Designed and maintained RMAN backup strategies, recovery catalogs, and automation scripts to support large-scale database environments.
• Troubleshot database, application, and system performance issues, identifying root causes and implementing corrective actions.
• Utilized AWR, ADDM, Statspack, Explain Plan, TKPROF, and SQL Trace to perform performance tuning and capacity planning.
• Developed UNIX shell scripts and scheduled automated jobs using CRON to streamline database maintenance and monitoring activities.
• Installed, configured, and maintained Oracle database software and instances across multiple server environments.
• Administered database security, auditing, user accounts, roles, privileges, and access controls.
• Performed database reorganizations, schema refreshes, and object management including tablespaces, tables, indexes, and user accounts.
• Optimized SQL queries and database performance through query tuning, execution plan analysis, and performance monitoring.

Bachelor of Computer Science - Computer Science