ERICA CASTRO-MORRISON
Ventura
Summary
Driven cybersecurity professional with proven expertise in Risk Management Framework Compliance and exceptional skills in workforce development, honed at NAWCWD. Excelled in enhancing system accreditation and cybersecurity policy enforcement, while mentoring teams towards innovation in knowledge management. Achieved significant improvements in enterprise collaboration and IT process automation, demonstrating a commitment to advancing cybersecurity excellence.
Overview
9
9
years of professional experience
Work History
Information Systems Security Officer
NAWCWD-Naval Air Warfare Center Weapons Division
Point Mugu
08.2021 - Current
- Maintained system architecture diagrams, hardware/software inventories, and cybersecurity documentation for system accreditation
- Successfully completed Risk Management Framework (RMF) step artifacts and NIST control testing to support system accreditation
- Investigated and documented cybersecurity incidents, ensuring compliance with chain of custody and data retention policies
- Developed and enforced configuration management policies, ensuring timely updates to security procedures
- Created a Wiki-based documentation repository for cybersecurity resources and user onboarding, increasing knowledge accessibility
- Enforced cybersecurity policies across multiple IPTs, collaborating with command leadership to enhance compliance
- Implemented user authentication protocols such as two-factor authentication.
- Conducted regular security audits to ensure compliance with established guidelines.
- Analyzed security procedure violations and developed plans to prevent recurrence.
- Documented all changes made to the organization's IT infrastructure to ensure compliance with industry regulations.
- Mentored junior employees in departmental activities and procedures.
- Educated staff on information security awareness topics such as phishing attacks, secure passwords.
- Developed and implemented organization-wide information security policies, procedures, and standards.
- Managed user accounts within Active Directory environment.
- Reviewed vendors' products for potential weaknesses in their applications or services.
- Promoted security awareness among employees and clients to alleviate risks and breaches.
- Approached customers and engaged in conversation through use of effective interpersonal and people skills.
- Achieved cost-savings by developing functional solutions to problems.
- Worked with cross-functional teams to achieve goals.
- Provided support and guidance to colleagues to maintain a collaborative work environment.
- Utilized various software and tools to streamline processes and optimize performance.
Lead Innovation Trainer
NAWCWD
Point Mugu
09.2022 - 02.2023
- Chief Technology Office Innovation Training Lead, overseeing training logistics, schedules, communication, and resource coordination for the Innovation Division and CoLab
- Designed and led interactive onboarding workshops for New Professionals (NPs), transforming sessions into full-day immersive events
- Developed cross-training programs, enhancing the technical expertise and adaptability of NP hires
- Partnered with Diversity Action Teams (DATs) (EPIC & HEAT) to create inclusive hiring and retention initiatives
- Provided mentorship and professional development coaching for new cybersecurity hires and early-career professionals
- Documented all training activities including attendance records, feedback forms, surveys.
- Suggested and offered specific training programs to help workers maintain or improve job skills.
- Recommended changes or improvements in existing training processes as needed.
- Used role-playing, lectures, and simulations to present information in variety of instructional techniques and formats.
- Managed multiple projects simultaneously while adhering to tight deadlines.
- Conducted onboarding sessions to orientate new staff members about company policies and procedures.
- Designed and developed training materials for new employees in the organization.
- Assessed training needs through surveys, interviews with employees or focus groups.
- Created and offered additional materials to enhance training.
Fusion (Confluence) and ServiceNow Administrator
NAWCWD
Point Mugu
02.2022 - 09.2022
- Managed 20,000+ enterprise users as a Fusion (Confluence) Administrator, ensuring seamless collaboration and knowledge management
- Provided technical support and user training on Fusion Wiki, Jira, and Spork, improving adoption and troubleshooting issues
- Developed and deployed self-service training modules for users, reducing the dependency on IT support
- Spearheaded Fusion to SharePoint migration, optimizing collaboration and reducing software licensing costs
- Created dashboards and compliance tracking tools within Fusion, providing leadership with real-time cybersecurity insights
- Acted as a liaison between NAVAIR Fusion and Flank Speed Product Owners, driving cross-platform knowledge sharing and training initiatives
- Gathered data pertaining to customer needs to identify, predict and evaluate system and network requirements.
- Created scripts for automation of manual processes in ServiceNow.
- Documented standard operating procedures and guidelines related to usage and administration of ServiceNow platform.
- Coordinated with vendors and third-party providers for integration projects involving ServiceNow applications.
- Provided troubleshooting and testing to support network.
- Troubleshot technical issues related to ServiceNow implementation.
- Analyzed user feedbacks and identified areas where further improvement could be done in order to enhance user experience.
- Developed and maintained ServiceNow platform, including customizing forms, workflows, tables, fields.
- Monitored user activities to ensure compliance with data security policies and regulations.
- Created accounts and configured hardware to support onboarding process for new hires.
- Maintained documentation on configurations and maintenance using component labeling and technical diagrams.
- Provided training to end users on how to use the features of the ServiceNow platform effectively.
- Collaborated with other teams such as DevOps, IT Security and Network Operations to ensure proper functioning of applications running on the ServiceNow platform.
- Provided effective resolutions to issues and escalated problems with knowledgeable support and quality service.
Cybersecurity Student Researcher
Norfolk State University
Norfolk
01.2016 - 05.2021
- Led research projects in digital forensics, malware analysis, and cryptography.
- Mentored over 20 cybersecurity interns, guiding them through research in desktop digital forensics, Bluetooth hacking, and malware analysis.
- Assisted in managing grant-funded cybersecurity initiatives (DOE, DOD, NNSA, SFS programs).
- Conducted research on emerging cybersecurity threats and trends to keep the team informed.
- Investigated cases of potential cybercrimes including malware attacks, phishing emails and unauthorized access attempts.
- Participated in incident response drills to prepare for potential cybersecurity breaches.
- Researched new methods and technologies used in digital forensics investigations.
- Performed digital forensics analysis of seized devices including computers, laptops, mobile phones and tablets.
- Reviewed system logs to determine when a system was compromised or accessed by an unauthorized user.
- Investigated suspicious activity utilizing forensic tools such as EnCase and FTK.
- Collaborated with law enforcement personnel on the investigation of cybercrimes.
- Maintained updated knowledge through continuing education and advanced training.
- Wrote and executed scripts to automate tasks.
- Recovered deleted files from hard drives using specialized software tools.
- Evaluated log files and digital information to investigate network intrusions.
Education
Master of Science - Computer Science - Information Assurance
Norfolk State University
Norfolk, VA06-2021
Bachelor of Science - Computer Science And Information Assurance
Norfolk State University
Norfolk, VA05-2019
Skills
- Risk Management Framework (RMF) Compliance
- System Accreditation (ATO/IATT)
- Comprehensive Security Audits
- Cybersecurity Policy Enforcement
- Enterprise Collaboration
- Knowledge Management
- Configuration Management
- Access Management
- IT Process Automation
- ServiceNow
- SharePoint
- Cybersecurity Training
- Workforce Development
- Technical Writing
- Process Documentation
- Incident Response
- STIG Compliance Auditing
- Security policy development
- User awareness training
- RMF Step Artifacts
- Configuration Control Board Actions
- ServiceNow Workflow Automation
- Dashboard Development
- Wiki
- Fusion Confluence
- Cybersecurity Risk Assessment
- Data Access Request
- User Account Management
- Security information management
Accomplishments
- Recognized for Exceeding Expectations in cybersecurity process improvements, technical training, and automation projects.
- Reduced contractor onboarding time from multiple days to under 36 hours, improving workforce efficiency.
- Developed self-service training repositories, enabling continuous learning and reducing administrative overhead.
- Appointed Lead Innovation Trainer, implementing interactive onboarding programs for new cybersecurity professionals.
- Designed and deployed multiple ServiceNow workflows, automating cybersecurity risk assessments and compliance reporting.
- Led Fusion (Confluence) to SharePoint migration, reducing operational costs and improving enterprise knowledge management.
- Awarded multiple performance-based bonuses for exceeding mission objectives and delivering high-impact results.
Leadership And Diversity Advocacy
- Co-Lead of African American Pipeline Action Team (APAT) at NAWCWD Point Mugu, championing workforce diversity and equity.
- Organized recruitment and retention initiatives to increase African American representation in cybersecurity roles.
- Served as Mentor for Udacity continuing education program, supporting workforce upskilling and cybersecurity career development.
- Coordinated data-driven workforce retention strategies with executive leadership and diversity action teams.
References
References available upon request.
Timeline
Lead Innovation Trainer
NAWCWD
09.2022 - 02.2023
Fusion (Confluence) and ServiceNow Administrator
NAWCWD
02.2022 - 09.2022
Information Systems Security Officer
NAWCWD-Naval Air Warfare Center Weapons Division
08.2021 - Current
Cybersecurity Student Researcher
Norfolk State University
01.2016 - 05.2021
Master of Science - Computer Science - Information Assurance
Norfolk State University
Bachelor of Science - Computer Science And Information Assurance
Norfolk State University
Similar Profiles
Alyshia BellAlyshia Bell
Financial Technician at Naval Air Warfare Center Weapons DivisionFinancial Technician at Naval Air Warfare Center Weapons Division
Zackary McGuireZackary McGuire
Complaints Manager /Affirmative Employment Manager at NAVAL AIR WARFARE CENTER WEAPONS DIVISIONComplaints Manager /Affirmative Employment Manager at NAVAL AIR WARFARE CENTER WEAPONS DIVISION
Payman MoghaddasPayman Moghaddas
Flight Test Specialist at Naval Air Warfare Center Weapons DivisionFlight Test Specialist at Naval Air Warfare Center Weapons Division