John Perez Email & Phone Number

Bogotá, Distrito Capital, Colombia

Bogota, Dc

Provide guidance to business lines to ensure design, development and implementation of projects and initiatives are in accordance with the Bank's Information Security Standards and in compliance with industry regulations. Review and confirm Third Party’s contract compliance against Information Security and Control (IS&C) requirements. Knowledgeable in security architecture principles in multiple security domains (cloud security, application security, data protection, network security, Identity and Access Management, security engineering, security governance)

Bogota D.C.

Plan and lead IT risk assessments and audit engagements, providing guidance, delegation, and feedback to the team in strategic topics such as the adoption of Cloud technologies and the implementation of the Bank’s cybersecurity programLead and supervise small teams (2-3 people) in integrated IT risk analysis and IT based audits, as well as coaching and mentoring more junior members of the audit team.Manage field work, inform senior Directors of the IT risk assessments and audit engagement status and manage IT Auditors performanceMeet with IT Directors on a regular basis to stay informed of current projects, future projects, and to address management’s concernsProvide guidance to business decision-makers on issues and development of risk mitigation strategiesCommunicate findings and recommendations to management.

Bogota D.C.

Developed both short-term and long-term audit plans in the IT audit group through risk assessment activitiesPlanned, executed and followed-up Information Technology audits for both, IT processes and projects and IT-related aspects of core business processes. Evaluated the adequacy of the Bank’s information systems to meet processing needs, evaluating the adequacy of internal controls, and ensuring that assets controlled by those systems were adequately safeguarded.

Bogotá, D.C.

Executed audit engagements that reviewed the design and effectiveness of the bank’s control environment.Performed computer specific and general control audits of mainframe and distributed server platforms, telecommunications and information security technologies.Documented audit work using automated audit management tools.

Master Of Science - Ms, Computer/Information Technology Administration And Management

Is Engineer, Information Systems