Juan Carlos Fondevila Sancet Email & Phone Number

Engineer Technical / Functional - Auditor with extensive experience in the areas of Telecommunications, Information Security Systems, Processes, and Compliance Standards, with specialist expertise in "Global Information Security", Risk Appreciation Mgmt & Internal Control SOX / SOD Processes. Developed and implemented the Management System of Information Security at Orange Dominicana under the France Telecom Group standards - ISO / IEC 27001, & others.Strong knowledge & application of Stds & Process Mgmt Methodologies, Quality, Info Security in:ISMS: ISO / IEC 27001. Analysis and Risk Mgmt: ISO / 27005:2018, Octave, Mehari, Magerit.ISO 31000 RM. Sarbanes Oxley "SOX" & "SOD".CENELEC Regulations: UNE-EN 50126-1/2, IEC 62278: “RAMS”, UNE-EN 50128, IEC 62279: “SW for control and protection of FFCC”, UNE-EN 50129:"HW System. electronic security signaling ”. “SIL”, “Safety Integrity Level”. Railway Applications - The Specification and Demonstration of Reliability, Availability, Maintainability and Safety (RAMS) - Part 1: Generic RAMS Process.Knowledge in IRIS Quality, The International Railway Industry Standard (IRIS) based on the ISO 9001 std. Certified as: "ISO 27001 Lead Auditor" (LA),by: Professional Evaluation And Certification Board - American National Standard Institute (PECB - ANSI). No.: PECB-ISMSLA-100422.Certified as: "ISO 27001 Lead Implementer" (LI), by: Professional Evaluation And Certification Board - American National Standard Institute (PECB - ANSI). No.: PECB-ISMSLI-100280.Certified as: "ISO 27001 Lead Implementer" by Veridion - RABQSA International. LB / MC / OI / IS. No: ISMSLI-A000294. and competent in: "Consulting Information Security (MC)", "Optimization of the organization and Risk Management Advisory (OI)" and "Security Management Advisory Information Systems (IS) ", "Lead Implementer & Lead Auditor Certified Trainer, ISO / IEC 27001:2005". Professional Evaluation and Certificaction Board, PECB, No.: CT032.Certified Security Professional Network Information "(CCNSP), ID CP140410/1000227/02047 for Cyberoam, a division of ElitecoreTechnologies,"PCI DSS. Data Security Std), WLA-SCS (World Lottery Association Security Control Std)Security Audits – Wireless Audit / Methods: OSSTMM, ISSAF, OWASP.Social Eng, Awareness in Infor SecBCP: BS 25777, BS25999, NIST 800-34.Datacenters and Infrastructure: TIA 942.MIL, ISO 9000, OHSAS, .Program / Project under "PMI".(PMBOX)10 + years of experience in various Projects of Infor Sec & in Audit & Internal Control

Listed skills include Security, Iso 27001, Information Security, Security Audits, and 42 others.

• 

  Instituto Tecnológico De Buenos Aires

  Computer And Information Systems Security/Information Assurance