As PCI QSA, Luis performs PCI DSS assessments / audits with clients located in Argentina, United States, Uruguay, Chile, Costa Rica, Mexico, Panama, Peru, Colombia, Belize, Republican Dominican, Ecuador, and Guatemala.Luis has developed the QA Security Program and Leads a team to perform the quality assurance process to meet with PCI SSC, VISA, American Express and MasterCard defined guidelines.Proactively identifies opportunities to improve the quality of PCI Practice in the QSAC.

Luis provided security services as PCI QSA on the scale of Mexico, US, Central and South America to assess companies in accordance with PCI DSS.Luis implemented different security services as a consultant, like PCI DSS gap analysis, Information Security Management Systems (ISMS ISO 27001), risk management process, IT, and security audits in accordance with different standards and regulations such as PCI DSS, ISO 27001, and SOX.

Luis participated as Principal Consultant of two security services in a Federal Institution in Mexico (SAT), the first service was "Risk Management", where was developed a risk methodology, risk analysis and management process to treat the risk level until acceptance level. The second service was the implementation of the ISMS (Information Security Management System) in accordance with ISO 27001:2005 in the security department.For three years Luis performed the internal audit in accordance with ISO 27001 in the ISMS in the company Scitum.One of the interesting projects that Luis made was the Security Governance Model in a company with 3000 employees in Costa Rica, where the results allowed them to have a Security Framework, Policies, Roles, and Risk management and ISMS.

Luis had the opportunity to work at PROSA; this company is the biggest switch in Mexico and Latin America in banking transactions.At the beginning of the journey, he was part of the Internal Audit team, Luis initiated the strategy to make internal audits like PCI DSS, SOX -SAS 70 Type II and ISO 27001:2005.At the end of 2008 Luis was promoted into Information Security Department, and he coordinated the team in the logical access control.Luis coordinated external audits with the standards ISO 27001, PCI DSS and SOX to re-certify in accordance with the standards and regulations. He was in charge to evaluate security solutions with vendors to identify and validate the solutions that the company required in terms of integrity, confidentiality, and availability.

2006 was a very important year, Luis and the security team had developed a strategy of information security according to ISO 27001: 2005 to implement those required controls identified in the strategy to the Preliminary Electoral Results program "PREP 2006" in the election of the President of Mexico. Some of the strategies were DRP, risk management process, policies, procedures and security baselines for the devices involved in the PREP's system. The results obtained allowed the election day, the PREP and the people involved in the process were prepared for any contingency and could act according to plan.