Bryte Ziddah

Information Security Officer @ Maryland Department of Information Technology

About

Information Security Analyst with 9+ years of experience supporting federal cybersecurity, RMF, ATO packages, NIST 800-53 control implementation, POA&M management, continuous monitoring, vulnerability remediation, and enterprise security governance. Strong background working with DHS, state-level agencies, and federal compliance frameworks, delivering secure, audit-ready systems through structured Risk Management Framework (RMF) activities and cloud-focused security practices. Experienced in conducting security assessments, control validations, eMASS documentation, incident response support, and aligning systems with DHS 4300A, FISMA, FedRAMP, CIS, and OMB mandates. Hands-on expertise across SIEM, scanning tools, identity & access management, secure configuration, threat analysis, and policy development — supported by Security+ and active Public Trust + DHS Secret Clearance. Adept at partnering with engineering, cloud, and leadership teams to drive compliance, reduce risk, and implement scalable cybersecurity controls. My focus: delivering secure, compliant, and resilient systems for mission-critical federal environments. In addition, I have strong analytical and problem-solving skills, attention to detail, and the ability to communicate technical information effectively to both technical and non-technical stakeholders. My work experience in cybersecurity analysis has prepared me to handle complex security challenges and contribute effectively to protecting organizations' digital assets.

Country

United States

City

Laurel

Industry

Information Technology & Services

Skill

Cybersecurity, Information Security Management, Risk Management Framework (RMF), Physical Security, Compliance Regulations, Security Management, Security Operations, Internet Security, U.S. Health Insurance Portability and Accountability Act (HIPAA), Internal Controls, Interpersonal Skills, Internal Audits, Customer Relationship Management (CRM), Asset Management, GCIA, Microsoft Outlook, Microsoft Word, Microsoft PowerPoint, Tenable Nessus, ServiceNow

Experience

Information Security Officer

Maryland Department of Information Technology

2023-12 - Present · 2 yrs 10 mos

United States

• Supported statewide cybersecurity initiatives by conducting risk assessments, vulnerability analysis, and implementing remediation actions aligned with NIST 800-53, CIS, and DHS 4300A requirements. • Developed, maintained, and reviewed security documentation, including SSPs, POA&Ms, SARs, and incident response evidence to support compliance and audit readiness. • Assisted with continuous monitoring, control testing, and enterprise security posture reviews across cloud and on-premise systems. • Strengthened detection and response processes using SIEM platforms, log review, and threat investigation procedures. • Collaborated with IT teams, system owners, and leadership to ensure secure system configurations, timely mitigation of findings, and alignment with RMF lifecycle stages.