Alexander Salcedo Email and Phone Number

As the Customer Trust team’s lead analyst, I oversee multiple compliance programs and security assurance initiatives. My responsibilities include implementing security measures to meet industry standards, managing team planning and budget, and leading critical annual assessments such as PCI-DSS, NIST CSF, NIST 800-171 and ISO 27001.- Led and managed the Customer Trust team, overseeing annual planning, budget management ($400,000+), and team roadmap execution, ensuring timely delivery of key milestones and alignment with organizational goals.- Directed cross-functional PCI-DSS compliance programs, collaborating with Infrastructure, Vulnerability Management, and Security teams to identify and remediate 150+ control gaps, implement new technical controls (e.g., firewall reviews, segmentation scans), and reduce compliance risk.- Successfully led critical assessments such as the Security Assessment Report (SAR) and POAM submissions, driving timely delivery, effective stakeholder collaboration, and achieving a reduction in audit findings.- Developed and optimized team processes and tools, managing Jira workflows, creating team structure boards, and implementing efficient reporting systems to track compliance initiatives and enhance productivity.- Strengthened external customer trust by managing compliance support portals, streamlining customer request workflows, and partnering with Sales and Legal teams to ensure accurate and timely delivery of compliance documentation.- Led the procurement, onboarding and implementation of Lyft's first external, public-facing Customer Trust website and portal. https://lyft.safebase.us/Relevant Frameworks/Standards:NIST CSF; NIST 800-171; SOC 2, Type II; PCI-DSS; ISO 27001; HIPAA; Sarbanes-Oxley (SOX) ITGCs; OWASP Top 10

Relevant Frameworks/Standards:- NIST CSF- SOC 2, TSC- PCI-DSS (Merchant)- ISO 27001/2

Relevant Frameworks/Standards:- NIST CSF- SOC 2, TSC- SOX, ITGCs & ITACs