José Ignacio Solis Email and Phone Number

• CISO of Arcus, a Mastercard company• Keep information security compliance for SPEI (Banco de México), IFPE-CNBV (National Banking and Securities Commission) and PCI/DSS• Implement an Information Security Program according to the Mastercard Information Security posture.• Partnering with Business, Technology and Compliance to promote a risk culture and information security awareness in the company.• Provide technical expertise to ensure confidentiality, integrity and availability of Mastercard information systems.

• Responsible for the following areas: o Deployment and administration of AWS Infrastructure and DevSecOps (EC2, S3, microservices, serverless, cost administration, BC/DRP, AWS Security Hub, Well Architecture Framework, Bitbucket, Bamboo, Sonarqube). o Deployment and administration of Azure Infrastructure. o Applications support (Dynamics NAV, Dynamics CRM, SABA, Sharepoint, etc.) o Business intelligence (Power BI, AWS Datalake, Athena, Upsolver, etc.) o Information Security (ISMS ISO27001, Vulnerability and Pen-Testing). o IT Services (On-premise Data Center, Network and Telecom, Enpoints, etc.)

• Risk and Control Lead Consultant for CITI NAM (North American) Region.• Involved in projects such as Global ATM Next Generation and Remote Account Opening.

• Responsible for setting the strategic decisions, managing the overall operations and resources and develop the business.• Helped several organizations to implement information security management systems (ISMS) and Risk Management frameworks based in ISO 27001 to be successfully audited by compliance entities or agencies (for example: SAT – Annex 28 and PAC, PCI/DSS, CNBV- National Banking and Securities Commission).• Serve as consultant to financial institutions (Banks and Fintechs) on secure payment systems and consumer banking for service improvements, cost savings and fraud reduction.• Consultant for Mexican Fintech Law to several Fintech companies.• Architect of solutions on Digital Transformation projects that resulted in efficiencies and cost reduction in the operation of processes (for example: e-commerce, cloud applications, big data, apps both iOS and Android) by developing applications and integrating third party vendors to provide one solution to the client.• Project management of applications, through agile methods, integrating web services platforms such as AWS, Azure or Google, interface with payment providers like PAYU and OpenPay for e-commerce, connections to credit and debit cards processors such as PROSA and Evertec, exchange of information with banks (Santander, AMEX, BBVA, among others) and entities as EFECTIVALE, SODEXO and EDENRED, and the develop of apps for iOS or Android.

• TSYS México is a company specialized in providing services to banks in the processing of high volume of information to personalize payment cards and digital documents.• Responsible for establishing the company's IT and the Information Security strategy reporting to the CEO with dotted line to TSYS Inc CTO and CISO, managing an annual budget of $2 million USD. With a staff of 50 people distributed in four areas: Infrastructure, Systems Development, Information Security and Smart Cards. • Managed the budget of the area with annual savings up to 10% each year. Negotiated contracts with vendors.• I was appointed as CISO to implement successfully an Information Security Management Systems based in ISO27001 and annually receive audits from VISA, Mastercard, PCI/DSS, regulators (CNBV, SAT, Banxico), clients (banks) and TSYS Inc.• Implemented a Risk Management program to comply with industry and regulatory standards.• Lead the Information Security agenda within TSYS México and their clients, including driving business/functional stakeholder engagement to ensure delivery of secure applications, infrastructure and projects. • Technical savvy in information security tools to monitor infrastructure/software vulnerabilities, BCP/DRP, etc.• Lead the development of secure applications (Web, .NET, apps, C#, Java), administer the DB (SQL, Oracle, MySQL) and the architecture of the infrastructure (Telecom, FW, servers (Windows, Linux), HSM, etc), to receive, process and analyze up to 10 million records monthly from clients (mainly banks) to personalize payment cards (smart cards), digital documents (e.g. card statements) and feed multichannel schemes on a highly security environments.• Successfully incorporated within the development of secure applications guidelines such as OWASP, NIST and SANS within a DevOps environment.• Created several new services and products every year which contributed to increase the revenue of the company in 5 to 10% in the average.