- Design of an IT risk management framework in accordance with MICITT and ISO 31000 standards, integrating best practices for risk identification, assessment and mitigation.- Process modeling and risk documentation using Bizagi and BPMN.- Process analysis and design of an improvement plan for IT risk management, optimized to be managed with a small team.- Implementation of risk assessment methodologies including classification and prioritization using a heat map, and development of controls for critical risk mitigation.

Participated in the development and maintenance of documentation, policies, and procedures.Collaborated with cross-functional teams to design and execute robust compliance strategies aligned with PCI DSS and PCI MPoC standards.Responded to compliance inquiries and resolved issues promptly to maintain regulatory alignment.Used repositories with compliance-related documentation, ensuring accessibility and accuracy.Developed process diagrams and code diagrams to improve understanding and compliance with PCI DSS and PCI MPoC standards.

As Laboratory Operator, I was responsible for the management and supervision of the inventory of assets in the computer laboratories, ensuring the correct cataloging and maintenance of equipment. I also managed the loan of equipment, coordinating its availability and control, providing technical support to users and ensuring the proper use of resources.

During my time as Administrative Assistant, my responsibilities included creating and managing official documents, drafting memos and maintaining internal records. I was in charge of cleaning and updating data in Excel, ensuring accuracy and organization of information. In addition, I provided support in the optimization of administrative processes, contributing to the efficiency of the team. My skills in organization and management of digital tools allowed me to improve the quality and workflow within the department.Translated with DeepL.com (free version)

Analysis of functional requirements, review of Use Casesand management of database documentation.