IT Consulting, Training and Auditing(Cyber, Information Security, IT Quality Services, and Quality)

• Dec 2017 - Present

◽︎ ISO 9001 | Quality management systems — Requirements◽︎ ISO/IEC 27001 | Information technology — Security techniques — Information security management systems — Requirements◽︎ ISO/IEC 20000-1 | Information technology — Service management systems — Requirements◽︎ ISO 22301 | Security and resilience — Business Continuity Management Systems — Requirements◽︎ PCI DSS | Payment Card Industry Data Security Standard• Creation of required documentation, including Quality Manual, Procedures, and Forms, services.• Gap Assessments, Onsite or Online Discovery services• Training services• Implementation services• Internal Auditing services• External Auditing services provider for International certification bodies.• Plan and execute operational audits of various business areas using risk-based audit methology.• Prepare audit reports reflecting opinion of effectiveness of the system processes, non-conformities and the effectiveness of activities carried out.

Senior Consultant | Auditor |Trainer | Project Manager

• Dec 2013 - Nov 2017

ISO 27001, ISO 20000 standards for Information Technology Industry• Build successful working relationships with team members, key customers and stakeholders that improves the value of the security services being performed.• Provide knowledge sharing and technical assistance to other team members.• Provide guidance and support for team in Attack and penetration testing and web, mobile, thick client application security reviews.• Consult and assist stakeholders with mitigation and remediation efforts from penetration resting results.• Assist in the growth of company information security services• Assist in driving security awareness to the end users through presentations and classes• Work in partnership with clients to implement security controls in pragmatic ways that deliver investment value and support business operations.

Information System Manager

• Mar 2008 - Nov 2013

• Responsible for the overall management of the Information Systems and technical team at the city hall with emphasis on maintaining systems that support the operations of the city hall.• Coordination of city hall application development efforts and implementation.• Supervised the activities of 14 Information Systems personnel, insuring appropriate skills levels are maintained in accordance with city hall needs. Providing coaching and performance evaluations as well as project and task prioritization.• Created and updated department procedures• Coordinated recurrent training for team members as well as initial training for new hires.• Created and managed reports and projects specific to team activity and performance.

Professor

• Feb 2009 - Jul 2010