Looking for a job

James McIntyre

@npgandlove

Message

I strengthen federal security compliance, audit controls, and risk remediation across NIST-governed environments.

United States

Message

What I'm looking for

I'm looking to apply my NIST compliance, security controls, audit, and risk analysis experience to help stakeholders navigate complex regulatory requirements and strengthen security operations.

At Oracle, I support NIST 800-53 and NIST 800-171 compliance for federal clients, translating security requirements into practical action across technical, engineering, legal, and business teams.

I manage vulnerabilities and mitigation strategies in POA&Ms, prepare SSPs and SARs, and support Assessment and Authorization and Authorization to Operate processes. I also present continuous monitoring and technical security reviews grounded in NIST controls and best practices.

Previously, I tested controls for PCI, SOC 1/2, ISO 27001/27002, FISMA, COBIT, and NIST engagements at Equifax and built a foundation in IT audit at NASCO and Brown & Brown Insurance. I bring CISA and CISSP credentials, risk analysis, controls testing, and actionable audit recommendations to complex compliance work.

Experience

Work history, roles, and key accomplishments

Current

GRC Security Analyst

Current

Oracle

May 2020 - Present (6 years 4 months)

Support and execute NIST 800-53 and NIST 800-171 compliance for Federal clients. Develop security requirements, manage vulnerabilities, and communicate compliance positions to stakeholders.

NIST 800 53 NIST 800 171 Nessus Splunk E MASS POA&M SSP SARs ATO A&A Risk Analysis Compliance

Security Analyst

eHire

Apr 2019 - Feb 2020 (10 months)

Performed consolidated testing of controls for PCI, SOC 1/2, ISO 27K1/27K2, FISMA, CObIT, and NIST. Reviewed and documented results of controls testing with technical and non-technical partners.

PCI SOC 1 SOC 2 ISO 27001 ISO 27002 FISMA COBIT NIST Controls Testing Test Planning

IT Auditor

Nasco

Sep 2017 - Mar 2019 (1 year 6 months)

Interviewed business personnel to gather information and interpret results, communicated potential risks, and developed corrective actions. Maintained a repository of IT audit issues and corrective action plans.

IT Audit Risk Analysis Controls Testing Walkthroughs Corrective Actions Stakeholder Management

IT Auditor

Brown and Brown Insurance

Feb 2017 - Aug 2017 (6 months)

Performed independent evaluations of IT controls, security, policies, and procedures. Executed IT audit engagements and reported to management on the adequacy of internal controls.

IT Audit Internal Controls Compliance Risk Analysis Audit Reporting