Nanayaa Serwaa-Williams
Information System Analyst, Risk Analyst
Hire this person
Send a job offer directly to this candidate
About
Experienced IT Security Assessor and NIST 800-53 Control assessor with several years of combined experience in Federal Risk and Authorization Management Program (FedRAMP), National Institute of Standards and Technology (NIST), Federal Information Security Management Act (FISMA), Risk Management Framework (RMF) processes, Risk Assessment (RA), System Development Life Cycle (SDLC), and contingency planning. Well versed in NIST 800-53 Rev 4 and 5 security controls as well as the ATO acquisition process and maintenance requirements, vulnerability management, security control implementation, assessment and authorization, POA&M management, continuous monitoring, and risk assessment. Broad understanding of information technology concepts and cloud computing models.
Audit projects include Security Audit, RMF, COBIT, PCI DSS, HIPAA.
Experience
Experienced IT Security Assessor and NIST 800-53 Control assessor with several years of combined experience in Federal Risk and Authorization Management Program (FedRAMP), National Institute of Standards and Technology (NIST), Federal Information Security Management Act (FISMA), Risk Management Framework (RMF) processes, Risk Assessment (RA), System Development Life Cycle (SDLC), and contingency planning. Well versed in NIST 800-53 Rev 4 and 5 security controls as well as the ATO acquisition process and maintenance requirements, vulnerability management, security control implementation, assessment and authorization, POA&M management, continuous monitoring, and risk assessment. Broad understanding of information technology concepts and cloud computing models.
Audit projects include Security Audit, RMF, COBIT, PCI DSS, HIPAA.
Education
Bachelor of Science in Computer Science
Kwame Nkrumah University of Science and Technology
