RESPONSIBILITIES • Ensure information’s confidentiality, integrity and availability using best practices (ISO 27000, ITIL, CoBIT, SANS CIS, PCI, NIST) • Identify and reduce risk by working with all IT functional areas in a Plan-Do-Check-Act methodology. • Maintain a cybersecurity framework with governance controls to be compliant with local and international laws and regulations. • Plan and execute budget for Information Security ProgramMAIN ACCOMPLISHMENTS • Implemented PCI compliance project for The Home Depot México and maintained compliance over 11 consecutive years reducing risk of data breach and avoiding acquirer bank fines. • Implemented a cybersecurity program to increase cybersecurity maturity from 1.6 to 2.5. Measured by EY • Implemented governance controls using NIST Cybersecurity Framework for critical infrastructure and processes setting a maturity level and be capable of measuring maturity increases from 1.4 to 2.3 in 10 months. Measured by Gartner • Hardened payment process for 120 stores and reduced the use of payment card information within the company by 90% • Consolidated security operation in one Security Operation Center (SOC) for incident handling and infrastructure operation reducing 30% incident response times and 50% requirement assistance • Implemented ISO27002 controls including a security awareness training for 20,000+ associates and continuous awareness program to reduce human security incidents • Implemented an Ethical Phishing Campaign to reduce click rate from 19% to 6% also reducing phishing risk.