Angela Johnson, PMP, CISSP, CGRC, A/CCISO

Lead a 13-member cybersecurity analyst team delivering IC security assessments, Zero Trust alignment, and encryption policy implementation for mission-critical systems. • Directed enterprise security and privacy control assessments aligned with ICD 503 and IC CIO Zero Trust initiatives, reducing authorization risk and accelerating ATO timelines. • Managed program governance structure including risk tracking cadence and executive-level briefings for SES-level government stakeholders. • Assessed cloud service provider (CSP) security implementations to ensure compliance with federal and IC security standards. • Identified and mitigated program-level technical, operational, and management risks — improving mission assurance and delivery reliability. • Developed and communicated information system security policies, directives, and encryption standards for diverse technical and non-technical audiences. • Mentored 13 cybersecurity analysts, driving team performance, professional development, and program delivery capability.

Led a team of 8–10 ISSOs responsible for system security, compliance, and risk management across multiple enterprise IC environments. • Co-led development and operationalization of the inaugural Virtual Information Security Service (VISS) Center, expanding enterprise cybersecurity service delivery capacity. • Directed POA&M management and remediation strategy, reducing risk exposure and strengthening security posture across the portfolio. • Delivered executive-level reporting (daily/weekly/monthly) on program status, risks, and performance metrics for senior government leadership. • Managed personnel tasking, performance reviews, and timekeeping to sustain program delivery and contract compliance. • Enhanced security systems, policies, and tool usage to protect confidentiality, integrity, and availability of sensitive data.

Managed cybersecurity program execution supporting C4I systems with full accountability for cost, schedule, and performance across six Technical Direction Letters (TDLs). • Directed multi-project delivery across six TDLs, ensuring alignment with DoD/DON RMF requirements and successful execution of contract deliverables. • Led RMF assessment and authorization activities across multiple systems, achieving successful ATO outcomes. • Recruited and managed cross-functional security teams including specialized SMEs to support project execution. • Provided subject matter expertise in information system security assessment and authorization in accordance with RMF and DoD/DON requirements.

• Performed DoD Certification and Accreditation activities transitioning systems from DIACAP to RMF, ensuring full compliance with executive orders and federal regulations. • Developed and maintained RMF artifacts, bodies of evidence, and security authorization packages aligned with established standards. • Managed project timelines and deliverables to ensure adherence to security assessment and authorization deadlines.

• Led end-to-end project execution including budget oversight, vendor management, logistics, and staffing for multiple concurrent client engagements. • Delivered regular project status reporting and risk assessments; supervised event staff and interns to ensure on-time, on-budget delivery.

• Delivered executive-level program reporting, translating complex cybersecurity findings into clear, actionable narratives for senior leadership. • Conducted data analysis across information assurance activities to assess compliance posture and inform strategic risk management priorities. • Served as liaison between technical IT/cybersecurity teams and executive stakeholders, supporting governance and oversight functions. • Maintained documentation and tracking systems for IT program deliverables, ensuring audit readiness and leadership visibility.