Mark Johnson

Experience

• 

  United States Marine Corps

  Sept 1986 - Apr 1991

  Aviation Support Electrician

  Reviewed schematics and technical drawings to assist in troubleshooting and resolving electrical problems for all aviation support equipment on the flight line. Equipment included mobile electric generators, air start units, and tow tractors.

• 

  IBEW Local 26

  Sept 1991 - Jul 1995

  Apprentice Electrician

  Large construction project for various union contractors in the Washington D.C. area. Reading of electrical and construction plans, installation of conduit, electrical panels, outlets, lighting circuits, and light fixtures.

• 

  URS Corporation

  Jun 1997 - Jul 2013

  Network Manager

  Led and managed IT staff of 8 in relocating a URS office with 500 staff, achieving 100% network up time with oversight of the design, acquisition, and implementation. Authored a standard operating procedures manual and developed IT policy, budget, and planning documents. Introduced internal and external security testing processes, protecting IP and client data. Established a server hardening policy document to promote the security and integrity of server and application software.

• 

  AECOM

  Jul 2013 - Jan 2017

  Cyber Security Team Lead

  Directed multi-million-dollar upgrade and installation of network infrastructure. Conduct on-site cybersecurity assessments for state and local governments. Enhanced cybersecurity posture and data resiliency for client sites using custom 400-question cybersecurity assessment tool and on-site interview to ensure NIST/FISMA/HIPAA compliance. Design, install and manage network solutions for hosting sensitive data at disaster field offices during disaster relief operations.

• 

  BroadSoft

  Jan 2017 - Aug 2020

  Corporate Information Security Officer

  Orchestrated a comprehensive risk assessment of BroadSoft’s cybersecurity risk profile resulting into actionable items for remediation within industry standards based on NIST-RMF, FISMA, OWASP Top 10, CWE/SANS Top 25, CIS Critical Security Controls. Designed, implemented, and managed the Vulnerability Management Program (VMP) to include staff training, assessing and tracking vulnerabilities from Nessus, Qualys, AWS, GCP, and External Threat Sources, reporting to Senior Executives and representing the firm during audits. Vulnerabilities were triaged into JIRA POA&Ms for full SLA and audit compliance. Weekly coordination with engineering product teams ensured continued tracking of vulnerabilities for mitigation and remediation. Facilitated federal audit compliance through continuous monitoring processes. Show less

• 

  KACE Company

  Aug 2020 - now

  Corporate Information Security Officer