Juan Sanchez Email and Phone Number

-Ensure the correct implementation of all Information Security requirements across all internal areas by following up on the performance of their processes and policies and ensuring they comply with ISO 27001, IT Industry Standards, and Corporate Policies.- Responsible for maintaining our Corporate Security Policies and our Information Security Risks, Events, and Incidents tracking processes documented and in line with corporate expectations.- Develop a Global Security Awareness program to ensure these policies and customer compliance requirements are well-known and followed across the globe.- Review and approve Information Security-related sections in MSAs and Services contracts, to ensure compliance with client requirements.- Member of the Cybersecurity Incident Response Team.

- Redesigned Information Security Policy, to comply in content with ISO 17799.- Documented security activities to provide management a better look at the Information Security Area and be able to integrate these new insights into corporate strategy.- Implemented and Configured Network Security Tools, such as GFI Languard Network Security Scanner, ISS Internet Scanner, Retina to perform periodical vulnerability assessments. - Coordinated with IT department for the migration of 1000 users and a 7 server network to Windows 2000 and Active Directory, making these changes transparent to the users with no down time. - Coordinate Softtek Sarbanes-Oxley (SAS 70) type II and other IT Security audits every year, by reviewing, and enhancing security policies and procedures. These audits included all of Softtek offices around the world (Americas, Europe and Asia)- Implemented a digitized Incident and Risk Management workflows to allow everyone in the company to be able to report incidents. This workflow included automatic escalations, root cause analysis and action plan tracking.

- Documented and redesigned every Information Technology policy and procedures for our client, Bancomer Transfer Services.- Implemented and configured Network Security Tools, such as NetIQ Security Analyzer, bv-Control to manage servers, workstations and network security.- In coordination with the Systems Infrastructure Manager, corrected every finding of the Internal Systems Security Audit performed by BBVA.- Implemented network administration tools to automate security scans to keep the compliance of network security standards.- Provided high-level support to 44 NT-Windows 2000 servers, to enhance security and performance.- Participated in the migration from a Windows NT Domain to Active Directory

- Suggested and implemented the migration from Windows NT Domains to Windows 2000 & Active Directory.- Installed and configured MS ISA Server as a firewall and cache server to better manage Internet bandwidth.- Installed and configured two Citrix Metaframe Servers with Load Balancing to ensure high availability in published applications.- Redesigned the network architecture to improve performance and reliability. - Installed and configured Exchange Server 2000 and MS Clustering Service.- Implemented long-haul wireless connectivity between corporate offices and production facilities.

- Suggested and implemented some information security measures in Windows 2000 and Linux Servers.- Responsible for the Web Portal and Billing software interconnection.- Worked on the day to day operation of the Datacenter, reviewing performance logs, fine tuning of communication and server equipment and solving support issues.

- Installed and configured VPN Software to secure connections with some clients.- Implemented a video broadcasting solution for executive announcements and reports.- Installed, configured and gave maintenance to Alpha and Intel servers under Windows NT or Linux on a daily basis.- Automated the repetitive tasks of building and configuring personal computing devices using disk or partition cloning software.

- Designed and programmed a database system to be used in some of the center’s consulting projects.- Participated with opinions, insights and recommendations on Information Technology issues for the CSIM and its personnel