ELIKEM DUSE
Washington,DC Metro/Active Secret Clearance| Eligible TS/SCI
Summary
Information Security Executive with 7+ years of progressive expertise architecting and institutionalizing resilient security postures for federal and FedRAMP High cloud environments. Recognized authority in RMF orchestration, FISMA, FedRAMP, and NIST SP 800-53 Rev. 4/5, with a strong track record of leading 12+ ATO packages with 100% on-time authorization and managing 150+ PO&Ms in eMASS/CSAM. Active Secret Clearance. Adept at leveraging Generative AI and M365 Copilot to accelerate assessment automation, reduce supply chain risk through SBOM scrutiny, and improve Continuous Monitoring effectiveness by 40%.
Overview
1
1
Certification
9
9
years of professional experience
Work History
Security Control Assessor (SCA)
MindPoint Group / Tyto Athene - Federal Agency
04.2023 - Current
- Spearheaded end-to-end ATO paradigms for 12+ mission-critical major applications, encompassing FIPS 199 categorization, sophisticated control tailoring, rigorous assessment, and executive authorization.
- Executed control validation for 300+ NIST SP 800-53A R4/R5 controls using manual and automated methodologies with Nessus and ACAS, significantly reducing false positives.
- Authored 20+ authoritative Security Assessment Reports (SARs) and Risk Assessments, synthesizing complex findings and delivering irrefutable authorization recommendations resulting in zero major findings during FedRAMP 3PAO audits.
- Facilitated validation of assessment artifacts and implementation evidence, ensuring conformance with FedRAMP, FISMA, and agency-specific baselines while developing corrective action roadmaps.
- Enhanced enterprise C-SCRM posture by analyzing 50+ SBOs and supplier attestations per NIST 800-161, mitigating supply chain vulnerabilities.
- FedRAMP High | AWS GovCloud & Azure Gov | Clearance: Secret_
Information System Security Officer (ISSO)
Serco Inc. - Federal Client
12.2020 - 04.2023
- Authored and maintained 15+ comprehensive authorization packages in compliance with FISMA, including SSP, Risk Assessment Report, SAP/SAR, Contingency Plan, IRP, SOPs, CMP, and Remediation Plans, ensuring rigorous adherence to regulatory standards.
- Directed Continuous Monitoring for portfolio of 10 assigned applications, preserving continuous ATO and eradicating overdue PO&Ms through proactive, risk-centric stewardship.
- Conducted exhaustive risk assessments and compliance audits against NIST 800-53, producing irrefutable evidence and facilitating expeditious ATO reauthorization.
- Scrutinized vulnerability scan outputs from ACAS/Nessus and championed remediation initiatives with engineering teams, diminishing high-risk vulnerabilities by 45% within 6 months.
- Collaborated with cross-functional SMEs to architect authorization boundary diagrams, enterprise architecture schematics, data flows, and comprehensive hardware/software inventories.
- Chaired weekly A&A executive symposia with government stakeholders, tracking RMF milestones and resolving impediments, resulting in a 25% increase in milestone delivery.
- Formulated and institutionalized system and enterprise policies, procedures, and process guides, ensuring alignment with evolving NIST mandates.
Cyber Security Analyst
Zimmerman Associates - Federal Client
08.2017 - 11.2020
- Executed 30+ Security Control Assessments predicated upon NIST 800-53A Rev 4, evaluating management, operational, and technical control effectiveness and design adequacy.
- Executed technical assessments for accreditation-bound systems, aligning with classification thresholds and statutory mandates.
- Interrogated system, firewall, and IDS logs per established SOPs, reducing incident response time by 30% through astute analysis.
- Administered common control inheritance within CSAM and conducted vulnerability assessments via ACAS, facilitating precise risk quantification and mitigation.
- Engineered, tracked, and culminated PO&Ms and SCDs within CSAM, sustaining 95% compliance with remediation timelines and SLA.
- Facilitated System Security Categorization per FIPS 199 and NIST SP 800-60 Vol. 2, ascertaining provisional impact valuations for Confidentiality, Integrity, and Availability.
- Ensured SSP accuracy and currency through institutionalization of system modifications and control implementation status.
- Validated system requirements, security policies, contingency and incident response plans, and sophisticated access control and authentication mechanisms.
Education
MBA - Marketing
Strayer University
Washington, DCBA - English & French
University of Cape Coast
GhanaSkills
- Authorization & Assurance: ATO A&A SCA SAR SSP SAP POA& M
- Governance & Compliance: RMF Lifecycle Orchestration NIST 800-53 R4/R5 NIST CSF NIST 800-37/60 FISMA FedRAMP High FIPS 199/200
- Continuous monitoring
- Remediation ConMon 3PAO Audit Excellence
- Security Engineering: Vulnerability Management (Nessus/ACAS) STIG
- Hardening IDS/IPS Firewall & Log Analysis Contingency & IR Planning
- GRC & Cloud: eMASS CSAM JCAM ServiceNow GRC AWS GovCloud C-SCRM SBOM Analysis
Personal Information
Security Control Assessor | ISSO | RMF | FedRAMP High | FISMA | C-SCRM
Certification
Certified Information Security Manager (CISM) | CompTIA Security+
Timeline
Security Control Assessor (SCA)
MindPoint Group / Tyto Athene - Federal Agency
04.2023 - Current
Information System Security Officer (ISSO)
Serco Inc. - Federal Client
12.2020 - 04.2023
Cyber Security Analyst
Zimmerman Associates - Federal Client
08.2017 - 11.2020
MBA - Marketing
Strayer University
BA - English & French
University of Cape Coast