Runnold Spence Hr

Dynamic and results-oriented cybersecurity professional with over 10 years of experience implementing Risk Management Framework (RMF) processes and ensuring compliance with FISMA, FedRAMP, NIST SP 800-53/171, and CMMC standards. Proven expertise in cloud security (AWS, Azure), vulnerability management (ACAS, Nessus), and security documentation development (SSP, POA&M, IRP). Adept at conducting Security Control Assessments (SCA), leading ATO packages through eMASS/Xacta, and advising on system hardening, continuous monitoring, and audit readiness. Demonstrated leadership in supporting CMMC Level 2 readiness and FedRAMP compliance initiatives in both DoD and civilian environments. Extensive experience performing Security Risk Assessments, flaw remediation, and ensuring the confidentiality, integrity, and availability of systems and data throughout the Software Development Lifecycle (SDLC). Skilled at integrating security practices into continuous integration/continuous development (CI/CD) pipelines in both on-prem and cloud environments.