RMF & Compliance
NIST RMF, FISMA, NIST SP 800-53, security control selection, implementation, assessment, authorization support, continuous monitoring, policy development, and POA&M awareness.
Cybersecurity • GRC • RMF • Vulnerability Management
Clement B. Tangie
Cybersecurity Professional | Health Information Management | Certified ScrumMaster
Recent cybersecurity graduate with advanced academic preparation in Risk Management Framework implementation, governance, risk and compliance, vulnerability assessment, and penetration testing. Brings more than 20 years of security operations experience, strong incident reporting discipline, and a proven ability to protect people, facilities, information, and organizational assets.
About
Security experience strengthened by graduate-level cybersecurity education
I combine practical experience in access control, emergency response, surveillance, incident documentation, stakeholder communication, and policy enforcement with formal training in cybersecurity technology, computer networks, health information management, and Agile leadership.
My background supports roles requiring structured risk analysis, control documentation, compliance monitoring, vulnerability remediation, privacy awareness, cross-functional collaboration, and clear communication with technical and nontechnical stakeholders.
Core Competencies
Cybersecurity, governance, and technical capabilities
Risk & Vulnerability Management
Risk assessments, vulnerability analysis, remediation recommendations, impact analysis, Nessus, Nmap, CIS Benchmarks, and secure configuration practices.
Security Operations
Incident response, threat analysis, access control, CCTV, biometric systems, centralized logging, situational awareness, emergency coordination, and evidence preservation.
Network & Application Security
Network reconnaissance, service hardening, Wireshark, Metasploit, Burp Suite, SQL injection and XSS awareness, secure HTTP headers, and attack-surface reduction.
Health Information Management
Health information privacy, records management, data confidentiality, regulatory awareness, and protection of sensitive patient and organizational information.
Agile Leadership
Scrum principles, team coordination, stakeholder communication, iterative planning, issue tracking, facilitation, and collaborative delivery.
Academic Portfolio
Selected University of Maryland Global Campus projects
Risk Management Framework Implementation
FISMA Compliance - University of Maryland Global Campus
- Led a team of five in conducting risk assessments and developing security plans for a simulated enterprise environment.
- Implemented the RMF lifecycle: Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor.
- Supported security control documentation and risk-based decision-making aligned with NIST standards.
Achievement: Identified and mitigated 95% of potential security threats in the simulated environment.
Governance, Risk and Compliance
Regulations and Standards - University of Maryland Global Campus
- Developed and implemented a GRC program for a mock organization.
- Conducted compliance audits and risk assessments to identify vulnerabilities and evaluate regulatory adherence.
- Created policies and procedures to manage, communicate, and mitigate risk.
Achievement: Achieved a 100% compliance rate in simulated audits.
Penetration Testing and Vulnerability Assessment
Information System Defense - University of Maryland Global Campus
- Performed penetration testing on a simulated network to identify security weaknesses.
- Used Metasploit, Nmap, and Wireshark to perform reconnaissance and vulnerability assessment.
- Prepared findings reports and recommended practical remediation strategies.
Achievement: Identified and reported critical vulnerabilities, contributing to a 30% improvement in network security.
Experience
Professional security operations
February 2018 - Present
Security Technician | Allied Universal Services
- Conduct patrols and inspections to identify security vulnerabilities, safety hazards, and equipment issues before escalation.
- Manage access control using CCTV, access-card readers, and biometric systems while enforcing physical security policies.
- Respond to medical, fire, and security incidents and coordinate with emergency responders and law enforcement.
- Conduct preliminary investigations, document incidents, analyze threats, and recommend corrective action.
- Provide security awareness guidance to employees and visitors, contributing to a 30% reduction in unauthorized access.
December 2003 - February 2018
Security Officer / Receptionist | Admiral Security
- Managed visitor access, identity validation, phone communications, daily visitor records, and facility coordination.
- Protected facilities through CCTV, access control, biometrics, anti-tailgating practices, and policy enforcement.
- Provided user guidance on security procedures and social-engineering awareness.
- Helped reduce unauthorized access and strengthen overall facility security controls.
Certifications
Verified credentials
- ISC2 CGRC (formerly CAP) - Active since 2018
- CompTIA Security+ - Active since 2018
- Certified ScrumMaster (CSM) - Active since 2021
- Registered Health Information Technician (RHIT) - Active since 2017
Education
Academic preparation
- M.S., Cybersecurity Technology
University of Maryland Global Campus, 2023 - B.S., Computer Networks and Cybersecurity
University of Maryland Global Campus, 2021 - A.A.S., Health Information Management
Montgomery College, 2017
Contact
Let’s connect
I am interested in cybersecurity opportunities involving RMF, GRC, ISSO support, vulnerability management, security control assessment, and security operations.