Luis Velazquez Email & Phone Number

Atlanta, Georgia, United States

I reported directly to the InfoSec Assurance Sr. Director and led a team of six, including four Assurance Audit Analysts and two Developers. I spearheaded the InfoSec Ops Assurance team, overseeing internal policy controls assessments, automating compliance audit evidence collection, conducting on-site audits, and performing critical vendor security assessments. My focus was on driving compliance by automating audit evidence processes, enhancing customer experiences, and conducting vendor security audits. I also collaborated with Internal Audit to address governance, risk, and compliance (GRC) issues in support of all cloud services.► I implemented and managed a formal enterprise customer audit program, which streamlined responses to information security audits and alleviated stress on sales, account management, product, and support teams. This initiative not only delivered high-quality service that exceeded customer expectations but also supported $1.2B in contracts. The program enhanced information security assurance, strengthened customer trust, and reinforced long-term business partnerships, with feedback reflecting high confidence in our security measures.► I also led the Compliance Evidence Automation project, which involved creating automated solutions for collecting information security compliance evidence. This innovation eliminated the need for manual evidence collection, saving over 25,000 hours and reducing overhead and operational costs by approximately $2M.► I streamlined the Policy Control Assessment program, reducing turnaround time from 16 to 9 months by re-engineering processes and increasing departmental headcount. This improvement enabled faster awareness and implementation of corrective actions, significantly enhancing our organization's security posture.► I developed a training program that led to eight security certifications in one year, including CISSP, CISA, PCI DSS, CSA Star, and AWS, ensuring the team's skills stayed up-to-date.

Atlanta, Georgia, United States

Greater Atlanta Area

I reported to the Chief Operations Officer and led the IT Auditor in designing and implementing security solutions focused on governance, control practices, and security. I oversaw vulnerability and risk assessments, critical security controls implementation, incident response, and the ongoing maintenance of the Information Security program. My responsibilities included conducting threat and vulnerability assessments, recommending mitigation strategies, coordinating incident response, and managing business continuity, disaster recovery planning, and security awareness training across the organization.► I implemented a comprehensive Information Security Management System (ISMS) from the ground up, which led to ISO/IEC 27001 and World Lottery Association (WLA) certifications across 12 cities of operation. ► I managed external audits and completed the certification process within four years, securing our company's competitive advantage in the Lottery Gaming systems industry.

Manati, Puerto Rico

Promoted to report directly to the IT Director, I led a team of two and managed IT capital appropriation, infrastructure, and security operations across three cities for a leading contract pharmaceutical manufacturer. I oversaw physical and virtual server infrastructure, as well as telecommunications systems including WAN, LAN, WLAN, Internet, and voice PBX. I engaged with business and technology stakeholders to align security goals throughout the network lifecycle, assessed infrastructure deployments for security compliance, and managed network device configuration, penetration testing, and comprehensive security documentation.► I designed and implemented a robust server and network infrastructure and security strategy for corporate and manufacturing automation closed networks, covering 100% of core infrastructure services. ► I also developed and deployed a virtualization infrastructure platform, migrating all business applications from physical to virtual servers, which achieved a high availability environment with 99.99% uptime. ► Additionally, I reduced electricity and maintenance costs by 82% by consolidating over 70 physical servers into just 12 virtual hosts.

Manati, Puerto Rico

I was involved in global infrastructure and security initiatives, managing systems availability and implementing security controls. I also supervised local operations and handled vulnerability scanning, patch management, and virtual infrastructure administration.

Puerto Rico

In my role as a Programmer / Systems Analyst at MOVA Pharmaceutical Corp in Puerto Rico, I led the development and delivery of critical business applications. By analyzing user needs and software requirements, I ensured feasible designs within time and budget constraints.

Bachelor’S Degree, Information Technology, Cum Laude

Bachelor’S Degree, Business Finance