RandyRay Caseres

Experience

• 

  Raytheon Missiles & Defense

  Jan 2022 - Jun 2023

  Information System Security Officer

  - Assessing and monitoring systems compliance by performing weekly system audit reviews, media reviews, and hardware/software configuration management- Conducting investigations into information system security infractions and assisting with the preparation of reports, outlining corrective and preventative measures.- Support the assessment and mitigation of vulnerabilities throughout a systems life cycle- Adhere to all continuous monitoring efforts of information systems.- Assist the ISSMs with necessary support for security documentation, such as System Security Plans, Security Assessment Reports, SCTM's, and POA&M's. Show less

• 

  Innovative Signal Analysis Inc.

  Jun 2023 - now

  Information Systems Security Officer

  - Developing Security Policies and Procedures: Design and implement security policies, standards, procedures, and guidelines specific to cloud-based information systems, ensuring compliance with regulatory requirements and industry best practices.- Risk Management: Identify, assess, and prioritize security risks associated with cloud-based information systems. Develop risk mitigation strategies and controls to safeguard data and mitigate potential threats.- Security Compliance: Ensure compliance with relevant security standards, frameworks, and regulations (e.g., ISO 27001, NIST, GDPR) applicable to cloud-based information systems. Conduct regular audits and assessments to verify compliance and address any non-compliance issues.- Security Monitoring and Analysis: Implement security monitoring and analysis tools to detect and respond to security threats and vulnerabilities in cloud-based information systems. Monitor system logs, audit trails, and security alerts for suspicious activities and anomalous behavior.- Security Documentation and Reporting: Maintain accurate and up-to-date documentation related to security controls, configurations, incidents, and compliance status of cloud-based information systems. Prepare and deliver regular reports to management and stakeholders on security posture and performance.- Continuous Monitoring: Continuously evaluate and improve the security posture of cloud-based information systems through risk assessments, security reviews, vulnerability assessments, and penetration testing. Implement lessons learned and best practices to enhance security effectiveness and resilience. Show less