Gil Huerta

Master's

Cyber Security Systems

Management Information Systems

Risk Management

NOAA: National Oceanic & Atmospheric Administration

IT Specialist

• Collects quarterly FISMA system artifacts for all SaaS cloud environments, networks, configuration management baselines, and IT security and continuously updates all applicable NIST 800-53 Rev 5 control descriptions and implementation statements to receive passing Security Assessment Reports (SAR) scores. • Collaborates with Information System Security Officers (ISSO) to draft Risk Assessments, conducts Privacy Threshold Analyses (PTA) to recommend Privacy Impact Analyses (PIA), and prepares Risk Acceptance memos for OCIO signature. • Conducts initial review of all IT Acquisitions requests, screens for CISA-defined critical software provisions, and assesses PII concerns and 508 Compliance on all IT purchases across 12 NOAA FISMA systems/line offices. • Publishes updates to Cybersecurity Awareness Training (CSAT) manual, facilitates annual privacy training, and tracks currency of certifications, role-based training, and professional development milestones. • Curates a robust IT documentation library within the Cyber Security Asset Management platform and updates risk acceptance forms, interconnected systems agreements (ISA), contingency plans, system security manuals, and Plans of Action and Milestones (POA&M).