Amy N. Thomas

CISSP | Cybersecurity Strategy & Risk Management Expert

LocationAlexandria Virginia, United States
Current roleCyber Risk AnalystCybersecurity and Infrastructure Security Agency (CISA), Cybersecurity Division · since Feb 2025
Government service7yrsCybersecurity and Infrastructure Security Agency (CISA) · Charles County Government · City of Westerville · Federal Deposit Insurance Corporation (FDIC)

About

Results-driven security professional with expertise in cybersecurity strategy, infrastructure security, and risk management. Proven leader in developing and executing enterprise-wide security programs that safeguard critical infrastructure, mitigate threats, and align with compliance frameworks. Experienced in leading cross-functional teams, managing budgets, and advising executive leadership on security posture. Active clearance and deep expertise in cyber risk assessment and security operations.

Roles

Feb 2025–Present
Current role

Cyber Risk Analyst

Cybersecurity and Infrastructure Security Agency (CISA), Cybersecurity Division

Virginia

Information Security Analyst

  • Evaluate vulnerabilities in critical infrastructure and develop actionable security recommendations.

  • Advise leadership on cyber vulnerability intelligence, OSINT, and cyber risk trends, shaping national cybersecurity policies.

May 2021–Dec 2023
Former role

Security Analyst

Charles County Government, Information Technology

La Plata, Maryland

Security Analyst

  • Led security architecture reviews for cloud and on-premise infrastructure, implementing secure network configurations.

  • Conducted risk and compliance assessments, ensuring alignment with federal and state cybersecurity standards.

  • Developed and enforced incident response plans (IRP), reducing cybersecurity incident resolution time by 30%.

  • Provided forensic analysis and threat intelligence reporting, collaborating with federal agencies.

May 2020–May 2021
Former role

OSINT & Security Consultant (Pro Bono)

City of Westerville, Police Department

Westerville, Ohio

Information Technology (IT)

  • Designed threat analysis reports and automated an online search map to aid the investigation of the missing person case of a family member.

Jun 2017–Apr 2019
Former role

Information Technology Specialist

Federal Deposit Insurance Corporation (FDIC), Office of Inspector General/Administration/Information Technology

Virginia

Information Technology (IT)Information Security Analyst

  • Conducted risk assessments and compliance evaluations for IT security policies.

  • Analyzed security gaps in hardware and software inventory, leading to successful FISMA compliance.

  • Recognized with a Mission Achievement Award for contributions to IT security improvements.