Jerold Yoffa, CCISO CISSP CISM CRISC PMP ITIL CDPSE

Technical Program Manager at Kingfisher Systems

Jerold Yoffa is an experienced professional with a strong background in cybersecurity, risk management, and project management. Jerold has worked in various roles and organizations, showcasing their extensive knowledge and skills in the field.

Jerold's most recent role was as a Technical Program Manager at Kingfisher Systems, Inc., where they managed a program of security assessments for government agencies to receive their Authorization to Operate (ATOs). Jerold oversaw a team of assessors, tech writers, and support personnel to ensure that assessments were conducted in compliance with NIST and FISMA standards.

Prior to that, Jerold worked as a Private Consultant at Commonwealth Phoenix Consulting, providing consulting services for private clients. Jerold specialized in project management, risk assessments, security mitigation, and security program design. Jerold also drafted recommended policies and procedures aligned with NIST and CSF frameworks.

Jerold also served as a Senior member of the Information Security and Privacy Office at Partners Health Care, where they managed internal departmental and external enterprise-wide projects. Jerold mentored colleagues and team members on project management best practices and collaborated with C-level executives.

Additionally, Jerold worked as a Cyber Security Specialist at the Office of the Circuit Executive for the First Circuit Federal Court, advising individual courts on cybersecurity policies and procedures. Jerold used Nessus to identify vulnerabilities and recommended remediation strategies to enhance network security.

As an Independent Consultant, Jerold conducted security, risk, and compliance assessments for client companies. Jerold focused on helping these organizations become more secure and compliant, utilizing frameworks such as the Cyber Security Framework (CSF) and the Risk Management Framework (RMF).

Jerold's previous experiences also include roles at Schneider Electric, where they created a risk and compliance framework using NIST CSF as a base, and at the Federal Reserve Bank of Boston, where they performed security risk assessments and compliance analysis.

Throughout their career, Jerold has demonstrated their proficiency in IT governance, risk management, and compliance. Jerold holds various certifications, including CCISO, CISSP, CISM, CRISC, PMP, ITIL, and CDPSE.

Overall, Jerold Yoffa has a broad range of experience in cybersecurity, risk management, and project management, making him a highly skilled and knowledgeable professional in the field.

Jerold Yoffa, CCISO CISSP CISM CRISC PMP ITIL CDPSE, holds a Bachelor of Arts (BA) degree from the University of Hartford. Jerold'sstudies at the university encompassed a range of disciplines, including Psychology, Biology, and Engineering.

In addition to their degree, Jerold has obtained multiple certifications in the field of Information Security and Technology. Jerold is a Certified Chief Information Security Officer (C|CISO) from the EC Council, a Certified Data Privacy Solutions Engineer (CDPSE) from ISACA, a Certified Information Security Manager (CISM) from ISACA, a Certified Information Systems Security Professional (CISSP) from (ISC)², and a Certified in Risk and Information Systems Control (CRISC) from ISACA. Furthermore, they hold an ITIL certification from AXELOS Global Best Practice and a Project Management Professional (PMP) certification from the Project Management Institute. The specific months and years of when these certifications were obtained are not provided.

Links

Previous companies

Schneider Electric logo
Federal Reserve Bank of Boston logo