Adrian M.

Accomplished and resourceful professional with 25+ years of experience directing security assessment and authorization processes and ensuring continuous monitoring to improve organizational security posture. PMP Certified by PMI. CISSP certified by ISC2. CISA certified by ISACA. BS in Information Technology. Known for communicating effectively with IT system project staff and ensuring compliance with federal customer regulations to secure systems in diverse customer environments. Excel at navigating complex regulatory landscapes, delivering impactful solutions for critical information systems, and resolving potential issues to minimize risks and drive overall efficiency and security. Engineering background with expertise in Information Security, Cybersecurity, Compliance Management, Physical Security, Cloud Assessments, Zero Trust Architecture, System Auditing, Pen Testing, NIST CSF & RMF 800-53, and Cybersecurity Frameworks including CMMC, ISO 27001 & 27002. Great trainer and corporate speaker. Fluent in English and Spanish; understands French and Portuguese. MANPOWERGROUP AT INTERNATIONAL MONETARY FUND (IMF) | Washington, DC | CYBERSECURITY COMPLIANCE MANAGER Identified and mitigated application risks by conducting thorough risk assessments and collaborating with stakeholders throughout the lifecycle development process. Maintained internal audit control compliance by executing required changes in organizational processes. Coordinated annual ISO 27001 certification effort.  Improved tracking of non-compliance and vulnerability remediation status through efficient oversight of the integrated GRC tool (Archer) and application/infrastructure scanning tools (Qualys).  Oversaw and managed the NIST & ISO 27001 assessment programs, including development of policies, processes, and schedule/timelines for execution.  Ensured alignment between Department of Information Technology priority initiatives and Fund wide Cybersecurity Initiatives.  Ensured alignment between contractor and Fund staff time sheets, completed work, and deliverables required as defined in both issued work orders and project plans.  Orchestrated training sessions within IT divisions by cooperating with staff members and managers to address information security non-compliance issues.  Provided technical briefings to senior leadership as requested.  Lead teams of technical resources to prioritize the Fund wide security assessments and delivery of additional high-quality IT solutions that met business needs.  Researched and recommended innovative, secure, and automated solutions to improve the risk management processes.  Developed and updated project charters, scope statements, and scope management to align work efforts to organizational goals and objectives.  Developed transition activities and rollout schedules during both pre- and post-implementation.  Managed work activities to ensure conformity to the project scope, timelines, and budgets.  Monitored performance and quality measures/metrics and provided tracking and periodic reporting on these measures/metrics; also created lessons learned and after actions reviews.  Identified, tracked, managed, and reduced the impact of risks and issues.  Managed vendor relationships to ensure high levels of quality deliverables and performance.  Met legal, regulatory, and policy mandates. AT&T CONSULTING SERVICES | Oakton, VA | PRINCIPAL - TECHNOLOGY SECURITY, CONSULTANT Steered security management activities and initiated assessments for ISO 27001, FISMA/NIST SP 800-53, and FTC, focusing on large retailers and medical product manufacturers in both U.S. and Latin American regions, including Brazil, Colombia, and Mexico. Reinforced security measures by designing and operationalizing the audit process for Network Access Control Security within the AT&T Network.  Showcased expertise as a Local and International PCI QSA Auditor to deliver valuable insights and guidance and fulfill the requirements of international retail clients.  Devised Security Architecture plans for multiple clients and delivered a comprehensive Risk Assessment perspective by analyzing current and planned states of Cloud Services, Cloud Auditing, and Cloud Security.  Developed and applied a Managed Public Key Infrastructure (MPKI) for the Nuclear Regulatory Commission in Rockville, MD, utilizing the Sun Identity Manager (IDM) for internal staff and trusted partners.  Gathered and compiled relevant data to guarantee the timely completion of all documentation requirements for Certification and Accreditation. SECURITY CONTROL ASSESSOR REPRESENTATIVE (SCAR) Trained and mentored a team of Security Control Assessor Representatives (SCAR) within the Assessment and Authorization (A&A) branch for the joint service providers (JSP) of the Department of Defense (DoD).