Mabel Ayensu

• Perform hands‑on NIST SP 800‑53 assessments, including specialized overlays (HVA, AI, Critical Software, FedRAMP).
• Assess impacts of new laws, regulations, and federal guidance; recommend updates to policies, manuals, and assessment tools.
• Streamline assessment processes using agile methods and automation to improve speed, accuracy, and consistency.
• Maintain and update assessment package templates to align with evolving federal requirements.
• Train government personnel on executing SCAs and understanding RMF expectations.
• Integrate threat modeling and threat‑hunting concepts to enhance proactive risk identification.
• Implement automation solutions (RPA, workflow orchestration, data transformation) to reduce manual workload and improve operational efficiency.
• Evaluate business processes and workflows to identify modernization and optimization opportunities.

Executed comprehensive assessments of management and technical security controls.

• Developed Security Control Assessments (SCA) in alignment with NIST guidelines.
• Prepared and reviewed Security Assessment and Authorization (SA&A) documentation and plans, ensuring compliance with FISMA regulations.
• Analyzed vulnerabilities using Tenable Nessus and maintained ongoing oversight of security policies.