Lead for cybersecurity solutions: PCI DSS, SOC 2, and VCISO.

Una compañía especializada en el cumplimiento de la normativa PCI DSS 4.0 creada por un equipo de expertos internacionales con más de 30 años de experiencia en Ciberseguridad, Cumplimiento y Prevención de Fraudes.

-I am responsible to lead a group to provide data security consultancy to ensure information security compliance based in PCI Data Security Standard. - The Qualified Security Assessor (PCI - QSA) responsible to perform assessments of merchants and service providers who must comply with the PCI Data Security Standard.

I Provided data security and privacy expertise to each assigned project, designed and ImplementedData Security And Privacy controls in accordance with the current IBM Data Security And Privacyframework for USA and Canadian projects.

I was responsible for implementing the information security management system inMexico based in ISO 27001 norm and I am also responsible for writing the informationsecurity policies, procedures and guidelines focused on the IT area.I ́m in charge of accomplishing the information security controls and attending theinformation security external audits.I was in charge of analyzing and reporting the new security risks and vulnerabilities tothe CIO and CFO.I was responsible for developing the strategic plan for the Information security area

I was responsible for implementing the information security management system to make the baseline for a DRP and BCP. I was responsible for writing the information security policies, procedures and standards like the risk and incident management procedures and the hardening baselines. I was also responsible for the security awareness and training. I was in charge of analyzing and reporting the new security risks and vulnerabilities to the CIO, and for developing the strategic plan for the Information security area and establishing the Information classification to implement the right security controls.

-I was Responsible to support Risk Management process and establish the Annual Strategic goals for Information Security Area.-I was in charge of Implementation and sustainment of TI Governance guidelines for the information security area [Base: COBIT]. Integrating the security and governance best practices and control compliance.-I was responsible for IDS and vulnerabilities logs analysis and develop reports to be delivered to clients. -I was responsible to Hardening of OS, Security Standard development and implementation of them; standard for HP-UX and Windows servers’ -I was in charge of security Awareness for end users to inform the security polices and security best practices.

-I was in charge of Implementation and sustainment of TI Governance guidelines for the information security area [Base: COBIT]. Integrating the security and governance best practices and control compliance.-I was responsible to Hardening of OS, Security Standard development and implementation of them; standard for HP-UX and Windows servers’ -I was in charge of security Awareness for end users to inform the security polices and security best practices.

Sm4rt Security Services ISO for Mabe account.

-Project Manager to implement the security products whit a best practices focus.

- I was responsible for Elaboration of security perimeter architecture for the clients adapting the products to the different network environments. (Firewalls, Antivirus and IPS/IDS) - Presales Engineer.