Looking for a job

Josephine Ofosu

@josephineofosu

Cybersecurity Analyst at Sanofi US who maintained eMASS RMF packages and addressed vulnerabilities through ACAS scans and STIG checks.

United States

Message

What I'm looking for

I’m seeking to contribute my vendor risk management and compliance expertise to a dynamic organization focused on security and compliance across vendor relationships and enterprise applications.

At Sanofi US, I maintained RMF package artifacts and test results in eMASS, supporting package development and compliance with DoH, CNSS, and NIST requirements.

I worked with engineers to remediate vulnerabilities and managed POA&Ms arising from ACAS scans and STIG checks. I also conducted security evaluations and Annual Security Reviews to maintain RMF Authority to Operate for DoH systems.

At UMass Memorial Medical Center, I conducted third-party vendor risk assessments and recommended remediation for security exceptions. I also tracked findings and supported compliance with PCI, IT policy, and risk management requirements.

My background includes vendor risk management, security control assessment, and compliance across frameworks such as FISMA, FedRAMP, and NIST. I hold CompTIA Security+, CISA, SAFe Agilist 6.0, and PSM 1 certifications.

Experience

Work history, roles, and key accomplishments

Cyber security Analyst

Sanofi US

May 2022 - Dec 2024 (2 years 7 months)

Performed multiple roles in eMASS for RMF package development, collaborated with engineers to remediate vulnerabilities, and ensured compliance with DoH, CNSS, and NIST policies. Managed POA&Ms, conducted security evaluations, and generated weekly eMASter reports.

E MASS RMF NIST ACAS DISA STIGs POA&M Vulnerability Assessment Security Compliance EMASSer System Security Plans

Third-Party Vendor Risk Analyst

UMass Memorial Medical Center

Jun 2020 - May 2022 (1 year 11 months)

Conducted comprehensive third-party vendor risk assessments, analyzed security exceptions, and supported compliance with PCI, IT policy, and risk management. Collaborated with cross-functional teams and delivered training on vendor risk management best practices.

Vendor Risk Assessment Security Compliance PCI IT Policy Risk Management Project Management Training Cross Functional Collaboration