José Felipe García Vivanco Email & Phone Number

Mexico City, Cdmx, Mx

Miami, Us

Primary responsible of the Information Security strategy, management leadership, scoping and execution of business needs with info sec as top of mind.

México Df, Mx

Advisory Board Member of Cybersecurity Committee

Toronto, Ontario, Ca

Directing the strategy, operations and the budget for the protection of the enterprise information assets and managing the program information security program. The scope of my responsibility encompasses communications, applications and infrastructure, including policies and procedures as such as dialogue with regulators and senior management.During the past years was accomplished the definition and reissuing of the Information Security Master Plan as required by the regulator. Afterwards during my leadership, the minimum compliance to some regulatory articles has improved to reasonable means, as such as, the business-as-usual operations against a security incident. Furthermore, the security awareness to customer and internal employees has improved with full support of the senior committee. Responsibility among the improvement of controls among all channels to reduce the fraud for customers, into this field we have reduced more than 80% the trend year by year The bank counselors and senior management are having constant feedback to review the advances in security information activities and the improvement of controls with measurable risk and incident mitigation.

Ciudad De México , Ciudad De México , Mx

Advisory Board Member of Cybersecurity Committee

Boadilla Del Monte, Community Of Madrid, Es

Responsible for the control’s information security in Santander Global Tech and safeguarding all topics related to digital information. Within my responsibilities are the implementation and communication of the organization’s digital information security policies and procedures; as such as, the assessment and improvement of them. In addition, the enablement and operation of an emergency situation with an established business continuity plan (BCP) and all Santander Global Tech relevant Key Risk Indicators (KRIs) for group governance committees. At last, I’m the relationship liaison with auditors and regulators.After my onboarding the main areas for delivering quick wins have been ensuring effectiveness on all critical processes and controls (now 90% of the target) of the operation (up to 30% of the processes); currently we are targeting the mitigating non critical risks (70% of the operation). In addition, we are changing upgradable processes to ensure a better environment of control. Within core security components we have hardened and improved its footprint decreasing the risk for any contingency situation in all Americas infrastructure in a 30% against the photo of last year’s same period.

London, Gb

Chief Control Officer for Operations, Services and Information Technology (Risk Management / Internal Control) for Mexico. With the responsibility of managing the risks and improving the controls of all the processes in the operational backend of the bank, in the services provided to the line of business and within the procedures in the Information Technology field with main target of improving the risk environment of the organization. In addition, I lead the Internal Controlling function for HSBC México.The main achievements of the past years have been implementing and improving the risk and control methodology based in a new operational risk framework, as such as, following up of the evaluation of risks and controls targeting the improvement and effectively validation of the critical ones. Creating and formalizing the HSBC Internal Control System and having the evaluation as positive by the regulator and external auditor. This has leaded to the improvement of operational processes and mitigation of risk leading to most efficient compliance with the regulator. In addition, I introduced better MI reporting to the Senior Management and visibility of topics that were not considered and that might represent a high risk.

London, Gb

Head of Internal Control and Compliance for Technology and Services (Business Risk and Control Management) for Mexico and Latin America. Leading activities enabling risk assessments, preventive internal control implementation, risk identification and mitigation, control monitoring and continuous improvement, local and external regulators compliance, internal and external audit support, security reinforcement, record management and executive management reporting. Within my time onboard the environment of control has improved to lead the organization into more efficient processes mitigating risks, as such as, better quality in the execution with significant boundary changes now implemented in a business as usual basis. This has leaded to a 40% decrement of risk materialization within operational processes year by year, as such as, a 90% reduction of re implementation of non-effective controls. Improvement in the monitoring has leaded to the correct implementation of controls in all critical processes with effective evaluations of them by third parties in 99% of the iterations. New Management information has been implemented for the COO and standardized among the organization. At last as Project Manager 20 projects were leaded solving inherited issues of the organization in the technology and operations fields with the support of up to 1000 employees.

Lausanne, Ch

Global Information Systems Auditor for the CAD (Corporate Audit Department) with the responsibility of developing audits across the globe. Developing pure IS audits in conjunction of Integrated and Project reviews with continuous monitoring using predictive analytics and technology over historical data for trend detection and preventive resolution of gaps. Development of Audits and a Special Project in Latin America with detailed reporting to Lausanne, Switzerland for a system implementation of $35 Million Dlls, with the optimization of subjacent processes based in data analytics fixing inherited gaps and promoting savings for 20% in the involved project.

Torrance, Ca, Us

Further details please contact me

Worldwide, Oo

Auditor / Consultant for the Enterprise Risk Services / Control Assurance area for Financial Sector, Insurance and Service Industry. Generating general controls, data analytics, assurance and business cycles audits as sales leads for the firm.During this time I achieved personal growth in the company to Senior Auditor/Consultant role. Performed more than 15 Audits and two special projects in the financial sector related to SOX and Revenue Assurance. Sophisticated audit technics were used to drive big data analysis for banks and trade operators. With two clients were identified opportunities to develop sales leads that upgraded the service provided by the firm and added 2 million dollars in revenue to the area.

New York, Ny, Us

As businesses consultant I specialized in technical area for Baan IV and Baan ERP as well as CRM. For the applications were made specific developments, requirements and estimates.In this work I achieved to understand and handle applications as developments in the senior consultant role at the projects.

Master In Big Data & Business Intelligence, Computer Science

Chief Information Security Officer (Ciso) Program, Computer And Information Systems Security/Information Assurance

Master, Strategic Management (Msm)

Bs, Computer Systems For Management

Diploma, Consulting

High School, High School

Elementary And Secondary