Humberto Luis Salcedo Jara

T

Information Security Assurance Auditor

Thoropass

Aug 2024 - Current (1 year)

- Work directly with customers in the cloud to verify security controls based on sought-after information security frameworks (SOC 2). - Translate security and compliance requirements into actionable cloud tasks for team members to execute. - Test and review implemented cloud configurations based on established security and privacy frameworks. - Propose novel ideas for product features and ops improvements or opportunities for automation to empower a better customer experience.

Staff Information Security and Compliance Analyst

Qualifacts

Aug 2023 - Aug 2024 (1 year 1 month)

- Manages the development, evaluation, and implementation of corporate compliance programs and processes to mitigate cybersecurity risks. - Ensure protection of firm and allied assets and information. - Conducts security risk assessments, compliance and cybersecurity audits. - Compliance standards: SOC, HIPAA, HITrust, FedRAMP, FISMA, NIST CSF, NIST 800

N

IT Auditor

NIUBIZ

Jul 2022 - Aug 2023 (1 year 2 months)

- Management of internal audit programs and internal consulting. - Information security and cyber security policy audits - Secure software development audits - Digital solutions development audits - Processing solutions development audits (payment processing and financial operations) - Business intelligence process audits - Machine learning audits - SaaS, PaaS and IaaS audits - Penetration testing report reviews - IT architecture audits - Infrastructure-as-code (IaC) process audits - Critical asset monitoring audits in production, QA, stage, and development environments. - Risk management and Assessment - Analysis of complex processes and related risks. - Lead presentations of audit programs and preparation of audit reports. - An independ

E

Information Security Analyst

EVOL - TSnet S.A.

Feb 2022 - Jun 2022 (5 months)

- Perform management of SOX compliance efforts including internal reviews, management testing, periodic recertifications, designing and refining documentation. - Perform management testing for IT General Controls (ITGC). - Planning, development and implementation of procedures and policies for secure disposal of IT equipment and information (end-user and infrastructure level) - Risk management and assessment (ISO 27001, ISO 31000, NIST CF) - Manage SOX implementation plan in two regions for a Health Sector Corporation: Peru 🇵🇪 and Colombia 🇨🇴. - Manage and perform access reviews: User Access Reviews, Privileged Access Reviews & Critical Application Profiles Reviews. - Plan, Implement and Manage access reviews to critical business appli

Information & Cyber Security Analyst

TRANZACT

Sep 2020 - Feb 2022 (1 year 6 months)

- Work with IT and Information Security & Cybersecurity teams, supporting audit and compliance coordination, following NIST CSF and HIPAA (Health Insurance Portability and Accountability Act in the United States 🇺🇸) - Project management for the integration of new privileged access groups to the cybersecurity program. - Participate in meetings with Audit, Legal, Finance, Marketing, Operations and IT to provide guidance on various topics. - Provide SOX auditors with evidence to support policy compliance. Conduct successful Phishing Campaigns. - Project management for the integration of new privileged access groups to the cybersecurity program. - Ensure that security requirements are identified and complied with. - Perform physical access r

Information Security Intern

TRANZACT

May 2020 - Sep 2020 (5 months)

- Ensure that security requirements are identified and complied with. - Perform physical access reviews, Active Directory reviews, privileged access reviews, privileged VPN admin groups reviews and user access recertification to key business applications. - Document workflows and processes used during the audit process. - Support cybersecurity programs to determine compliance with published policies and standards. - Support the transformation of the current Audit & Compliance program. - Support with daily tasks and process improvement objectives to increase efficiencies.

G

IT Project Management Office (PMO) Intern

GLOBAL SERVICE INNOVATION S.A.C.

Jan 2019 - Feb 2020 (1 year 2 months)

- Lead and participate in the management of software development and implementation projects for startups. - Manage the implementation of technological solutions and elaborate user manuals according to the specified level of detail. Identify efficiency opportunities to maximize business profitability. - Excellent handling of first contact and in weekly meetings with foreign clients in person and virtually. - Improvement in fast and effective learning, due to the changing and agile environment of startups and digital ventures. - Support in market analysis to identify business opportunities and research new technologies for the business and customers. - Organization of workshops, courses and technology events. Design process flows and mockup

G

IT Project Manager Intern

Global Service Innovation S.A.C.

Jan 2018 - Jan 2019 (1 year 1 month)

- - Identify efficiency opportunities to maximize business profitability. - Support in market analysis to identify business opportunities. - Design process flow diagrams and mockups for MVP's (mobile and web). - Propose process improvements by analyzing workflows. - Follow up requirements and change requests from customers (in English and Spanish), - Participate in team and client meetings (in English and Spanish). - Research new technologies for the business and customers. - Manage technological support, technical assistance and functional queries from users of different business areas (in Spanish and English) attending incidents and/or services reported to the Contact Center, complying with service levels established in the service catalo

Humberto Luis Salcedo Jara

About

Detail

Timeline

Résumé