Darlene Dawson

Background

About Darlene Dawson

As a self-driven Information Security professional, I can help demystify security compliance. My expertise is in performing information security program analysis, security and privacy control analysis, risk assessments, security and compliance framework roadmap strategy, and all aspects of audit/assessment planning & preparation. I specialize in ensuring security within the Software Development Lifecycle (SDLC), including identifying security control gaps and coordinating ongoing improvements to information systems, applications, and supporting security plans, policies, and procedures. I consider myself a critical thinker and problem-solver, skilled at strategic project planning and at building and empowering cross-functional teams. Additionally, my diverse background gives me the ability to quickly grasp complex technical concepts and then simplify and communicate those concepts to non-technical colleagues and clients. Areas of Expertise:* Deep understanding of Compliance Standards and Risk Management Frameworks: NIST 800-53, NIST CSF, and HHS/CMS Acceptable Risk Standards (ARS); SDLC Frameworks: CMS Expedited Life Cycle (XLC) Framework, ISO 9001:2015 8.3 Design and Development; ISO/IEC 27001:2013/27002:2013, AICPA SOC1 control objectives, AICPA SOC2 Trust Services Principles, and regulatory frameworks including GDPR, CCPA, and HIPAA.* Expertise in project planning (using project management principles), agile and waterfall methodologies, and scrum project management.* Highly skilled with Atlassian Management Tracking Tools: JIRA and Confluence and ClickUp project tracking tools.* Proficient with business productivity tools including: M365, GSuite, Visio, Publisher, SharePoint, and Lucidchart.* Experience with Vulnerability Scan Tools: Fortify, Nessus, nCircle.* Familiarity with and usage of GRC Tools including: Apptega, OneTrust.