Misael Pinedo Project manager

Sr. quality and regulatory affairs manager

Infor

Jan 2022 - Dec 2022 (1 year)

- Supported the CSP’s global quality and regulatory affairs function and collaborated with multiple IT, audit, and CISO leaders on annual FedRAMP, GRC, and administrative efforts - Acted as an audit liaison between the organization, its third-party auditors (3PAO), and the Infor Government Solutions (IGS) program - Collaborated with project management in the gathering of data artifacts, evidence, and tracking of open Jira tickets and Smartsheet items

Technology risk management - consultant

KPMG US

Jun 2021 - Dec 2021 (7 months)

- Streamlined client deliverables, and supported ITGC/SOX-related projects, internal audits, and process workflows - Assessed multiple departments’ privacy, security, and data integrity controls - Acted as a liaison between the internal and IT project teams and tracked project status

B

IT SOX, program manager - consultant

Bank SANTANDER Now Bank CORPBANCA S.A

Jan 2021 - May 2021 (5 months)

- Provided off-shore IT SOX, risk, and control project support for the IT risk & security team; created process flows, spreadsheets, reports, and PPTs, reviewed policies and procedures - Identified potential gaps related to confidentiality, integrity, availability, and security of sensitive data, and reviewed QA documents - Reviewed and validated process narratives for critical systems; supported the CTO governance, compliance risk, and team efforts

A

Analista de seguridad de la información

Assurant Labs

Jan 2020 - Jan 2021 (1 year 1 month)

- Usé Cyber GRX, Security Scorecards, Bit Sight, SOC 1/2, ISO 27001, PCI-DSS y reportes CAIQ para cumplimiento de seguridad - Se siguieron las prácticas de gestión de riesgos aseguradas; proveedores de servicios externos supervisados y sus controles de seguridad - Se establecieron planes de respuesta a incidentes verificados, administración de parches y políticas de TI, que abordaron el riesgo de terceros; utilizó SIG

A

Information Security Risk Analyst

Assurant Labs

Jan 2020 - Jan 2021 (1 year 1 month)

● Reviewed SOC 2/SIG reports for critical vendors and evaluated whether security controls were in place. ● Used ISO 27001 data/control mappings and frameworks; supported a Service Now GRC implementation; conducted functionality testing. ● Monitored Security Scorecards, Bit Sight, and Cyber GRX results for critical vendors. ● Completed 100+ security assessments, and updated project and third-party documentation using the SNOW GRC and VRM platforms. ● Reduced the project backlog by 50%, participated in Agile team training, and participated in team policy & procedure development.

C

InfoSec, IT audit, IT compliance, 3rd-Party Risk - consultant

Clients: Kemper, Edison International, Experian, PWC, Bank of California

Apr 2016 - Dec 2019 (3 years 9 months)

- Verified corrective action plans were in place and risks were adequately addressed - Supported the audit team with documentation gathering, walkthroughs, and project support - Prepared summary reports; promoted cybersecurity training; coordinated the annual audits/GLBA Risk Assessment

Auditor senior, VPA

Citibank

Jul 2015 - Apr 2016 (10 months)

- Supported the IA Director, and prepared QA scorecards, business documents, and project planning initiatives with global regions - Supervised and trained other junior auditors and new audit staff to ensure proper security awareness and data protection - Participated in quality assurance audits of compliance, risk management, internal audit, and IT

C

Internal auditor

California International Bank, N.A.

Mar 2014 - Mar 2015 (1 year 1 month)

- Developed a risk-based audit plan, and metrics, partnered with IT and Risk management teams and executed GRC & ITGC activities - Engaged information security contractors for security testing work and other specialized operational audits such as BSA/AML/KYC - Supported the CEO, Director of Internal Audit, and external auditor function with document requests and corrective action follow-up

Auditor interno - senior

BANC OF CALIFORNIA

May 2012 - Sep 2013 (1 year 5 months)

- Asistí a la administración a través de los procedimientos de mejora de procesos, prueba de control e identificación de riesgos - Supervisé y coordiné proyectos SOX 404 para auditores externos y evaluaciones de examinadores, probé los controles internos - Informé de problemas de control internos al departamento de gestión y proporcioné recomendaciones para reducir los riesgos

P

Especialista en tecnologia e informatica, y asistente de contaduria

Pacific Alliance Bank

Jan 2011 - May 2012 (1 year 5 months)

- Asistí a la administración a través de los procedimientos de mejora de procesos, prueba de control e identificación de riesgos - Realicé funciones de contabilidad, preparación de entradas y salidas, análisis de cuentas y conciliaciones de hojas de balance - Asistí al jefe de finanzas mediante la gestión de documentación personal, organización de agenda y preparación de materiales

A

Consultor de auditoria

AuditOne, LLC

Jan 2008 - Jan 2010 (2 years 1 month)

- Participe en auditorías internas de varias instituciones financieras, identifique riesgos y presente mejoras a la jefatura, proporcione consultoria en el ambiente bancario y corporativo - Prepare hojas de trabajo e informes de auditoría, coordine el trabajo en grupo y evalué los procesos, riegos y controles internos

Misael Pinedo

About

Detail

Timeline

Résumé