Benjamin Asamoah

At Peraton, I provide INFOSEC oversight for Sponsor Information Systems Security Managers, helping system owners navigate Risk Management Framework and Assessment & Authorization requirements. I review system architectures, assess security and privacy controls, develop POA&Ms, and provide recommendations for risk acceptance and authorization decisions.

I help advance security and lower risk by creating documentation and step-by-step processes for cyber risk reduction, security-relevant changes, and Sponsor system understanding. I also review complex system designs, support incident investigations, and communicate security policy and technical risk clearly to technical and non-technical stakeholders.

Previously at ATS, I supported customers through the A&A process, processed SSPs in GreenLight for ATOs, conducted Rapid7 vulnerability assessments, and worked with system owners and ISSMs on risk acceptance. At UtiliQuest, I assessed NIST SP 800-53 controls, monitored security events, evaluated enterprise security architecture, and coordinated security changes for A&A approval.

I'm CompTIA Security+ and CISM certified, with a long-term goal of becoming an SME in IT security, information management, and systems integration.