Cybersecurity & Risk Management Specialist
KennyonSadler, CISSP
Subject Matter Expert · Risk Management Framework · Medical Device Security
📍 Remote, LA
|
kennyon.sadler@outlook.com
|
504-446-5804
Tenured IT and Cybersecurity specialist with extensive managerial experience in
Risk Management Framework (RMF) and Medical Device Security.
Proven record of translating strategic goals into actionable plans, managing large-scale teams,
and ensuring enterprise-wide compliance with Federal regulations. Expert at communicating complex
technical concepts to executive leadership while driving operational excellence through
data-backed project management.
20
Contractors Supervised
80%
Turnaround Time Reduction
100%
Network Compliance Achieved
◆ ◆ ◆
Team Leadership
- Currently serves as the Cybersecurity Risk Management Team Lead, overseeing a diverse team of 20 contractors.
- Directs enterprise-wide risk assessment creation and implementation across VA enclaves.
Workforce Development
- Expert in IT Program Management, curriculum development, and both in-class and online training instruction.
- Led Cybersecurity Teams at Cerner Corporation to execute risk assessments and information system testing.
Executive Briefing
- Frequently briefs the Authorizing Official (AO) and Designated Representatives regarding Enterprise Risk Analysis (ERA) decisions and acceptable risk tolerance.
Technical Translation & Liaison
- Proven ability to communicate complex technical concepts effectively to executive and business audiences.
- Acted as primary liaison between client sites and corporate HQ to guide solution design and supporting processes.
Strategic Facilitation
- Facilitates chartered working groups to develop innovative strategies for the reliability and accessibility of Authorized Information Systems (AIS).
Strategic Alignment
- Designs and manages enterprise cybersecurity architecture to ensure alignment with IT strategy, agency missions, and budgeting cycles.
Compliance Auditing
- Executes annual reviews and continuous monitoring of medical and clinical devices to satisfy FISMA reporting requirements.
Vulnerability Assessment
- Conducts comprehensive assessments on planned and installed information systems to identify protection needs and mitigate compromise risks.
Lifecycle Management
- Directs the full lifecycle implementation of the NIST RMF, managing security controls and authorization documents end-to-end.
Efficiency & Goal Achievement
- Reduced service turnaround time by 80% (from 10 days to 2 days) for corrective maintenance and cybersecurity service requests.
- Achieved 100% network compliance and conformance within 6 months through rigorous vulnerability analysis.
Complex Execution & Incident Tracking
- Proven ability to manage multiple timelines and contrasting priorities in high-pressure environments, including COVID-19 response operations.
- Utilized the Remedy Computerized Maintenance Management System to document and track all work incidents and security tool acquisitions.
Framework Expertise
- Expert in NIST SP 800-53 (Rev 4 & 5), RMF, FISMA, FIPS, DIACAP, and HIPAA.
IoMT & Medical Device Security
- Specialist in Medical Device Security (IoMT), managing Enterprise Risk Analysis (ERA) for clinical devices in alignment with VA Directive 6500.
ATO Remediation
- Orchestrates efforts for noncompliant security controls to ensure System Owners receive the Authority to Operate (ATO).
Infrastructure Protection
- Designed and implemented cybersecurity contingency plans, including disaster recovery and incident response procedures.
Advanced Threat Management
- Proficient in Cyber Threat Analysis, Incident Reporting (CIRC), and IT Isolation Management.
Emerging Tech Integration
- Cultivates industry partnerships to leverage advanced technologies for research, medical, and special-purpose devices.
Core Frameworks & Standards
NIST SP 800-53 Rev 5
RMF
FISMA
IoMT / MDS2
HIPAA
FIPS
DIACAP
VA Directive 6500
FedRAMP
IEC 62443
FDA Cybersecurity
Remedy CMMS
Enterprise Risk Analysis
Continuous Monitoring
Incident Response
Disaster Recovery
◆ ◆ ◆