Chimere L. Murrill, M.Sc. CISSP, CISM

Leads all aspects of SAP security personnel vetting, facility accreditation, and classified material protection while driving continuous compliance with DoD, JSIG, and OPSEC standards. Bridges security, leadership, and mission execution to ensure integrity across all SCI and SAP operations.

Directed enterprise-wide 24/7 security and network operations, aligning monitoring and incident response with mission and risk priorities achieving a 61% reduction in response times and strengthening resilience across classified and cloud systems. Applied JSIG and RMF principles to secure GSA cloud and SAP environments, ensuring compliance and continuous authorization. Oversaw CASB and vulnerability management programs, integrating Qualys, Sentinel, and SIEM analytics to maintain enterprise and federal standards. Provided executive oversight of firewalls, IDS/IPS, and SIEM operations, cutting breach impact by 20% through proactive detection and mitigation. Partnered with ISSOs to perform risk assessments and sustain ATO compliance. Led security governance and documentation standardization, improving automation and operational efficiency across IT and cybersecurity teams. Served as a strategic liaison to senior leadership, delivering data-driven insights on risk trends, performance, and cloud security posture.

Served as a trusted cybersecurity advisor to FEMA leadership and CIO stakeholders, translating complex technical risks into enterprise-level strategies that advanced the agency’s security modernization goals. Led a cross-functional team of analysts, engineers, and incident responders to align operations with federal mandates and mission objectives. Delivered executive risk dashboards and intelligence briefings to inform resource prioritization and enhance cyber resilience across critical systems. Managed SAP and classified security programs, including SOPs, Emergency Action Plans, and OPSEC initiatives, while overseeing PAR processing, indoctrinations, and debriefings per DHS directives. Strengthened multi-cloud and IAM security posture by deploying Tenable.io and implementing governance baselines for endpoint and identity protection. Directed enterprise vulnerability management and incident response, ensuring NIST and DHS compliance and rapid recovery during high-impact events.

·Served as the senior cybersecurity executive reporting to the CIO, providing strategic leadership and governance for statewide information security operations. Developed and executed an enterprise cybersecurity strategy that aligned risk management, compliance, and cloud security with business and regulatory priorities. Led multi-cloud governance across AWS and Azure, enabling secure modernization while reducing enterprise risk. Designed and implemented a comprehensive Identity & Access Management (IAM) program, integrating Azure AD, AWS IAM, and CyberArk to strengthen access controls and mitigate insider threats. Established a NIST RMF-aligned maturity model, advancing audit readiness and compliance across state systems. Directed enterprise incident response, disaster recovery, and COOP planning, ensuring continuity of critical health services. Regularly briefed executive leadership on risk and compliance posture, influencing strategic budget and modernization decisions, while mentoring a high-performing security team to sustain operational excellence.

Led classified security operations, conducting investigations into incidents and suspected compromises, producing detailed assessments, and coordinating mitigation with government leadership. Directed security control reviews and compliance assessments, developing corrective action plans and presenting findings to Program Security Officers (PSOs) and senior stakeholders. Oversaw access control, IDS operations, and SAP facility security, ensuring the protection of classified holdings and media in accordance with DoD and JSIG standards. Partnered with ISSMs and ISSOs through the RMF process to achieve and maintain Authority to Operate (ATO) across seven enterprise systems within FedRAMP-aligned cloud environments. Served as DevSecOps lead for audit readiness across multiple networks integrating Nessus, Metasploit, and continuous monitoring practices to proactively identify and mitigate vulnerabilities. Delivered risk intelligence briefings to leadership, summarizing emerging threats and vulnerability trends to strengthen overall cyber resilience.

Supported enterprise information assurance and compliance efforts by defining security requirements and ensuring proper handling of classified and sensitive data. Partnered with system architects and developers to implement NIST RMF security controls and maintain continuous compliance across 13 accredited systems. Served as the PMO interface for Certification & Accreditation (C&A) activities, coordinating audits, documentation, and resource allocation to meet mission objectives. Led penetration testing and vulnerability remediation using Metasploit, improving risk visibility and driving secure integration of legacy systems. Collaborated with senior leadership and technical teams to strengthen overall security architecture, streamline certification documentation, and uphold federal IA standards.

Directed the long-term cybersecurity and technology strategy for the organization, overseeing enterprise-wide infrastructure design, acquisition, and implementation initiatives. Led a team of six analysts in planning, configuring, and deploying cloud-based network environments within AWS, aligning configurations with NIST RMF security baselines to ensure compliance and resilience. Provided technical oversight and security validation for IT solutions, partnering with C-level executives to align technology investments with business objectives and risk posture. Conducted technical analyses and incident investigations across internal and external networks using proprietary government tools, supporting real-time threat detection and mitigation. Enhanced the organization’s security culture through enterprise-wide phishing resilience programs (KnowBe4), incident response coordination, and continuous cloud posture improvement.

- Responsible for effective provisioning, installation/configuration, operation, and maintenance of systems hardware and software and related infrastructure. - Participated in technical research and development to enable continuing innovation within the infrastructure. - Ensured that system hardware, operating systems, software systems, and related procedures adhere to organizational values, enabling staff, volunteers, and Partners. - Accountable for the following systems: Linux and Windows systems that support GIS infrastructure; - Linux, Windows and Application systems that support Asset Management; Responsibilities on these systems include SA engineering and provisioning, operations and support, maintenance and research and development to ensure continual innovation.

- Performed as the central point of contacts for security events/ incidents and main liaison between the customer, leadership, and external organizations - Worked in concert with the Team Lead to verify that the anomaly management (AMT) analysts - Performed vulnerability scanning of networks, operating systems and applications - Produced regular briefings to executive and military level officials detailing infrastructure status, maintaining situational awareness of operational status across the partner sites - Ensured a daily brief to leadership was prepared and daily reports/slides are submitted with current, accurate updates - Provided direction and guidance to analyst across a 24/7 watch shift

- Performed as the central point of contacts for security events/ incidents and main liaison between the customer, leadership, and external organizations - Characterized and analyzed network traffic to identify anomalous activity and potential threats to network resources in a 24/7 shop - Received and analyzed network alerts from various sources within the NE or enclave as well as determining possible causes of such alerts - Performed IDS monitoring, analysis and incident response to information security alert and or events- -Analyzed network traffic and IDS alerts to assess, prioritize, and differentiate between potential intrusion attempts and false alarms - Conducted morning status briefing providing upper management situational awareness and system metrics - Monitored multiple open source security tools to ensure system integrity suggesting filters to

Our physical world is increasingly supported by a cyberspace infrastructure. This infrastructure enables new business models, enhances communications, makes our personal lives more convenient, and contributes to our national defense. We are vulnerable to threats to our cyberspace infrastructure. Network outages, data compromised by hackers, propagating viruses, and other incidents affect our lives in ways that range from inconvenient to life-threatening. The Master of Science in Cybersecurity provides practitioners with the framework and knowledge to protect an organization's cyber assets. The program focuses on prevention, detection, countering, and recovery from cyber incidents. Students learn about technical tools and organizational practices such as training, access control, evidence collection, and disaster recovery and business continuity planning. UMUC (2015). Retrieved from http://www.umuc.edu/academic-programs/masters-degrees/cybersecurity.cfm)