Mohammed Sayeed

Background

About Mohammed Sayeed

Over 3 years of experience as a Cybersecurity Specialist in performing government contracts. 20 years of diversified experience as a Healthcare Manager and Health Informatics Consultant in the US Army. Well-experienced in information security and privacy practices across multiple HHS and DoD agencies. Well-conversant with federal IT security regulations and standards, such as FISMA, FIPS, FedRAMP, HIPAA, HITRUST, SOX, DSS-PCI, GDPR, RMF, and the NIST Special Publication 800 series. Well-experienced with various types of cybersecurity tools and techniques including IDS, IPS, DLP, WIDS, WIPS, VPN, Firewalls, etc. Proficiently prepares, reviews, updates, and maintains Information Systems Risk Assessments (ISRA), Systems Security Plans (SSP), systems Security Assessment and Authorization (SA & A) packages, systems Authorization to Operate (ATO) packages, systems audits, systems continuous monitoring throughout Enterprise Performance Life Cycle (EPLC) for IHS and CMS. Adeptly develops and finalizes documents required for each stage of Security Assessment and Authorization (SA & A) process. Evaluates FedRAMP packages, and prepares ATO package for on-premises (private cloud) infrastructure. Very well-versed in NIST SP 800-53 revision 5. Developes, supports, and guides on the preparation of System Security and Privacy Plans (SSPs) with security control requirements outlined in NIST Special Publications 800-18, and 800-37. Performs systems security and privacy assessments, produces Security Test & Evaluation (ST & E) Worksheets, System Assessment Plan (SAPs), Security Assessment Report (SARs), POA & Ms, ATO memos to prepare for ATO packages. Develops security procedures, templates and artifacts that support Incident Response and Vulnerability Management in alignment with industry best practices.Collects and analyzes data to detect deficient controls, duplicated effort, extravagance, fraud, or non-compliance with laws, regulations, and policies. Ensures compliance with agency requirements by examining all security related artifacts, system generated logs, databases, and organizational reports. Creates Audit Plan based on applicable framework for ITGC controls, Security Management, Access control, Configuration Management, Segregation of Duty, and Contingency Plan. Performs all stages of internal audit, including planning, fieldwork/execution, reporting, and follow-up. Prepares audit finding memoranda and working papers to ensure that adequate documentation exists to support audit completion and conclusion. Please contact me at masayeed09@gmail.com.