Information Security Analyst Resume Example

• Conducted kick-off meetings to collect systems information and categorize systems based on NIST SP 800-60.
• Developed security control baseline and tested plan used to assess and implement security controls.
• Created and updated the following Security Assessment and Authorization (SA&A) artifacts; FIPS.
• 199, Risk Assessments Report (RAR) Privacy Threshold Analysis (PTA), Privacy Impact Analysis.
• PIA), Contingency Plan, Security Test and Evaluations (ST&Es), E-Authentication, Plan of Action and Milestones (POAMs).
• Met with the system team to collect evidence, develop test plans and procedures and document test results.
• Designed and Conducted walkthrough formulated test plans, tested results and developed remediation plans for each area of the testing.
• Conducted FISMA complaint security control assessments to ascertain the adequacy of management, operational, technical privacy controls.
• Examined events logs for irregularities.
• Identified irregularities are then reported as incidents.
• The incident response is then initiated to mitigate these irregularities.
• Involved in security incident management in order to mitigate or resolve events that have the potential to impact the confidentiality, availability, or integrity of information technology resources.
• Created and maintained security metrics in order to help senior management to make decisions.
• Provided support to internal and external audit teams in gathering evidence to validate controls.

• Responded to external requests for information required by the organization for its regulatory filings.

• Maintained database and other reference materials related to legislative and regulatory issues and compliance.

• Provided analysis and support to merchants on product compliance laws, regulations, and best practices.

• Familiarity with HIPAA/HITECH Act provisions regarding PHI security and compliance.

•Completed released of information requests including retrieving patient's medical charts and returning charts, copying/scanning medical records accurately and correctly, according to requests, established procedures, and established standards of quality and productivity; and electronically transmits medical record to processing operations.

• Performed quality checks on all work to assure accuracy of the release, confidentiality, and proper invoicing.

• Maintained awareness of current legislative and regulatory requirements.

• Worked knowledge of Health ports connects, esmartlog, smart link, and rep online and centricity software.