Open to opportunities

Christopher Stevens

@christopherstevens

Message

Cybersecurity leader specializing in RMF, ATO management, and NIST 800-53/800-171 compliance.

United States

Message

What I'm looking for

I seek senior cybersecurity roles where I lead RMF/A&A efforts, drive NIST/CMMC compliance, mentor IA teams, and deliver measurable risk reduction in mission-critical federal environments.

I am a cybersecurity and information assurance leader with 17+ years supporting DoD and federal civilian environments, focused on RMF/A&A, eMASS package development, and NIST SP 800-53 Rev. 5 migrations. I currently lead ISSO/ISSM activities on a DISA Zero Day Network Defense effort, driving Rev. 4 to Rev. 5 gap analysis, control implementation, and evidence refresh to achieve and sustain authorization to operate.

I have hands-on experience implementing NIST SP 800-171/CMMC level 2 controls for development/test networks, managing vulnerability and IAVA/IAVM workflows, and assembling Change Request packages for ECCB approval. I combine technical expertise (ACAS/Tenable, STIG/SCAP, Splunk) with risk-focused leadership, having led IA teams, performed compliance reporting to senior leadership, and delivered repeatable processes for continuous monitoring and POA&M remediation.

Experience

Work history, roles, and key accomplishments

Current

Lead A&A Engineer

Current

Cyberfinders, Inc.

Jul 2021 - Present (4 years 4 months)

Leading RMF Rev.4 to Rev.5 migration for the DISA Zero Day Network Defense ATO, conducting gap analyses, updating control narratives, and assembling change request packages to achieve and maintain authorization.

STIG SCAP Compliance Vulnerability Management Change Control

ISSM / Division Manager

Novetta

Mar 2018 - Jul 2021 (3 years 4 months)

Led IA support for DevOps environments to achieve NIST SP 800-171 and CMMC Level 2 alignment, authored SSPs and boundary definitions, and managed IA staff and audit log centralization to support compliance.

CMMC SSP Audit Logs DevOps

Information Assurance Lead

DISA

Nov 2016 - Mar 2018 (1 year 4 months)

Led RMF/ATO activities for FED and REL DMZs and the DMZ Whitelist Tool, overseeing assessments, POA&M tracking, vulnerability/IAVA management, and release documentation to enable production deployments.

RMF A&A STIG Compliance PPS PPoS Reviews Change Control

Lead ISSO

Development InfoStructure

Mar 2015 - Nov 2016 (1 year 8 months)

Supported federal business systems with RMF artifact updates, system categorization, continuous monitoring, and coordinated remediation efforts to achieve ATO renewals across multiple agencies.

Monitoring Documentation