Melvin Odoh

ISSO · DHS Security Authorization

Information System Security Officer (ISSO)

Steampunk · Supporting DHS / ICE · Washington, DC

• Supports creation, monitoring, and status updates of POA&Ms to ensure weaknesses are resolved according to scheduled completion dates.
• Develops waivers and risk acceptance memos to support effective system risk management.
• Supports annual assessments, self-assessments, contingency plan testing, and ongoing authorization activities under DHS guidance.
• Coordinates with Privacy, Records, and Information Governance teams on compliance documentation and related requirements.
• Supports vulnerability management, patch management, incident reporting, audit readiness, and configuration management activities.
• Conducts and evaluates findings from Nessus, DBProtect, and WebInspect while ensuring NIST 800-53A controls remain in place and functioning properly.

Technology Compliance · Regulatory Security

Senior IT Security Analyst

FINRA · Technology Compliance Office

• Prepared materials and presentations for monthly working group and executive committee meetings.
• Worked with internal stakeholders to ensure timely classification of RegSCI systems on a triennial basis and before deployment.
• Maintained and updated FINRA tools such as POMS and AOPAIR to keep compliance information accurate and current.
• Reviewed and updated JIRA tickets to ensure alignment with SEC standards.
• Prepared quarterly reports for RegSCI systems and submitted them for SEC review and approval.
• Tracked employee and contractor training completion and maintained enterprise system classification records for ongoing compliance.

Cyber & Strategic Risk · Program Leadership

Senior Solutions Consultant

Deloitte Consulting

• Served as compliance lead for a cloud-based Medicaid Enterprise Solution, creating and maintaining security deliverables for five state health information exchange projects.
• Scheduled and participated in disaster recovery testing, third-party assessments, and after-action reporting while updating POA&Ms.
• Built and maintained governance, risk, and compliance processes to standardize requirements and maintain regulatory compliance.
• Prepared control mapping and led SOC 2 Type 1 and Type 2 assessments while supporting audit activities.
• Conducted privacy impact assessments and facilitated client walkthroughs of SOC reports across the supported environments.
• Also served as Security Shared Services Maintenance and Operations Project Manager, managing timelines, scope, stakeholder communication, and weekly status reporting across security testing and operations streams.

A&A · ISSO · Compliance Documentation

IT Security Analyst / Information System Security Officer (ISSO)

Xzentia IT & Cybersecurity Solutions

• Provided security expertise and guidance in support of security assessments and A&A / C&A activities.
• Reviewed authorization documentation for completeness, compliance, and control alignment.
• Facilitated Security Control Assessments and continuous monitoring activities while validating NIST requirements.
• Developed and reviewed A&A packages including SSP, SAR, FIPS 199, FIPS 200, POA&M, CPTPR, BIA, PTA, and PIA documentation.
• Collected and maintained operations and maintenance artifacts in CSAM and related artifact repositories to support ongoing assessment readiness.
• Managed vulnerabilities using Nessus and monitored post-authorization controls to ensure continuous compliance.

Agile Delivery · Scrum Leadership

Scrum Master

PNC Bank

• Coached teams on Agile and Scrum principles with emphasis on continuous improvement and self-organization.
• Facilitated all major ceremonies including daily stand-ups, sprint planning, retrospectives, demos, and backlog refinement.
• Supported Product Owners with prioritization and scope while improving transparency through dashboards, burndowns, velocity charts, and demos.
• Delivered metric reports to support product roadmap planning and stronger stakeholder communication.

Business Analysis · Process Modeling

Business Analyst

Guaranty Trust Bank PLC

• Worked with vendors and business stakeholders to resolve issues, gather requirements, and improve existing business processes.
• Updated and created process diagrams, defined project scope and vision, and developed business requirement documents and use cases.
• Coordinated with change management, problem management, and development teams to assess impacts and prepare milestone plans.
• Supported project management and requirements execution to improve system efficiency and delivery outcomes.