Gerente de Seguridad de la Información

• Jan 2019 - Mar 2019

Information Security and IT Auditor

• Sep 2016 - Jan 2019

• Advise executive management and committees on information security matters and provide guidance on the Information Security Management System (ISMS).• Support the organization in the compliance with the ISO/IEC 27001:2013 standard, providing detailed reports about the effectiveness of its Information Security Management system (ISMS).• Design and manage risk-based information security and information technology audits.• Review the information security processes, procedures, policies and the effectiveness of the controls in place.• Support the Risk Management department to perform information security risk assessments and define treatment actions. Show less

Information Security Manager

• May 2012 - Sep 2016

• Led the strategic development and implementation of an ISMS based on the ISO/IEC 27001:2013 standard. • Worked in collaboration with the Risk Management department in the IT risk assessment and risk treatment for information assets.• Developed, implemented and maintained information security policies, procedures, & technologies to achieve control objectives.• Helped in the design, development and implementation of the company’s risk management policy and also the continuity and disaster recovery plans.• Designed, developed and implemented an information security awareness program. • Implemented all the processes related to Verizon’s Security Management Program and helped the organization on the achievement of Verizon’s Cybertrust Security Certification• Tracked record on the implementation of IT security best practices based on multiple standards.• Worked in collaboration with the IT department in the creation of Incident Response and Vulnerability Management programs.• Implemented and administrated multiple IT security solutions, such as: Email and Web Protection, File Integrity Monitoring, SIEM/Log Management, Network Intrusion Prevention Systems and others.• Incorporated new security metrics and policy evaluation processes to effectively identify key areas of improvement across the organization. Show less