Ulises chombo Martínez

In this role, I was responsible for maintaining a secure and compliant environment in alignment with GDPR and ISO/IEC 27001 standards. I played a central role in strengthening the organization's security posture through the implementation of risk-based controls, incident response, and continuous improvement of internal processes. GDPR & ISO/IEC 27001 Compliance: I ensured that all systems and processes adhered to GDPR requirements and were aligned with ISO 27001 best practices. This involved implementing and maintaining data protection policies, conducting internal audits, and supporting the development of an information security management system (ISMS). Risk Assessments & Security Controls: I conducted risk assessments to identify security gaps and prioritized remediation efforts based on impact and likelihood. I helped define and apply technical and administrative security controls across systems, networks, and applications to reduce organizational exposure to threats. Incident Response: I led incident response procedures, including detection, investigation, containment, and eradication of security events. I worked closely with cross-functional teams to ensure rapid resolution and post-incident analysis for continuous improvement. Threat Intelligence: I monitored cyber threat trends and incorporated threat intelligence into daily security operations to anticipate and defend against new vulnerabilities and attack vectors. Digital Forensics: I conducted digital forensics investigations to determine root causes of security incidents. This helped the organization understand the scope and impact of attacks and improve future defensive strategies. Mentoring & Tier 1/Tier 2 Support: I provided guidance and mentorship to Tier 1 and Tier 2 analysts, helping them improve their skills in threat detection, triage, and response. Data Loss Prevention (DLP) & PCI-DSS: I deployed and fine-tuned DLP rules in support of PCI-DSS compliance, effectively protecting sensitive data and reducing the risk of unauthorized data exfiltration. Security Tooling: I worked with a variety of security platforms and tools, including Splunk, CrowdStrike, Cyberlnt, Recorded Future, Qualys, Tanium, Exabeam, FortiSOAR, and ArcSight, to detect threats, analyze behaviors, and coordinate automated responses.