Information Systems Security Manager | APJ Enterprise LLC
CISM | CEH | Security+ | ITIL v3 | FedRAMP | NIST RMF | Microsoft 365 Security | AI Governance
I’m a federal cybersecurity professional based in Stafford, Virginia, leading Governance, Risk, and Compliance (GRC) initiatives that align with FedRAMP Moderate, NIST SP 800-53 Rev. 5, and DoD RMF requirements.
At Marine Corps University, I’ve overseen security operations and modernization efforts — including the migration from CrowdStrike Falcon to Microsoft Defender, continuous monitoring across Azure and .edu networks, and maintaining enterprise Authority to Operate (ATO) compliance.
Now, through APJ Enterprise LLC, I’m building a hands-on GRC and AI Compliance Lab to bridge federal frameworks with modern Microsoft security and AI governance practices.
- Governance, Risk & Compliance (GRC): FedRAMP Moderate, RMF, NIST 800-53/171, CMMC readiness
- Security Operations: Continuous Monitoring, Incident Response, ACAS/Tenable, Microsoft Defender Suite
- Cloud & Identity: Microsoft 365 E5, Azure AD / Entra ID, Intune, Purview, Conditional Access, MFA
- AI & Data Governance: NIST AI RMF, ISO/IEC 42001, Responsible AI policies, AI risk assessment templates
- Documentation & Auditing: SSPs, SARs, POA&Ms, MOUs/MOAs, DADMS/DITPR registration, and compliance evidence
- Leadership & Mentoring: Translating complex compliance controls into actionable, sustainable processes
Explore my GRC + AI Compliance Portfolio, which demonstrates hands-on documentation, control mapping, and policy authorship aligned to federal and emerging AI standards.
| Section | Description |
|---|---|
| 📊 Risk Register | Risk catalog and scoring aligned with NIST SP 800-30 |
| 🧩 Vendor Security Questionnaire | Supplier assessment based on NIST SR and FedRAMP SA-9 |
| 🧱 Security Policies | Password, Access Management, and Acceptable Use |
| 🛡️ Incident Response | Response lifecycle, logging, and reporting templates |
| 📈 Continuous Monitoring | Metrics, POA&M tracking, and monitoring cadence |
| 🗂️ Data Classification | CUI and PII data handling framework |
| 🧱 Vulnerability Management | Patch validation checklist and risk reduction workflow |
| 🤖 AI Compliance | NIST AI RMF–aligned governance, bias testing, and accountability tables |
- 🧩 AI Governance & Risk Management — Applying NIST AI RMF to enterprise compliance programs
- ⚙️ Microsoft Security Automation — Building detection and compliance dashboards across Defender, Sentinel, and Purview
- 📈 GRC Modernization — Automating POA&M workflows and FedRAMP evidence generation
- 🧠 Professional Development — Pursuing SC-300, SC-401, and AI-900 certifications
📧 Email: [email protected]
🌐 Portfolio: jjordan1983.github.io/grc_portfolio
💼 LinkedIn: linkedin.com/in/jeanette-jordan
💻 GitHub: github.com/JJordan1983
"Compliance is not paperwork — it’s assurance. True governance lives in the systems we build, not just the controls we write."
— Jeanette Jordan