Sfoglia categorie
Esplora
Fiverr Pro
Italiano
$
USD
Diana R
@carolinacyberse
Systems Engineer and Cybersecurity Specialist
Polonia
Inglese, Spagnolo
Chi sono
I help organizations strengthen cybersecurity, reduce risk, and meet compliance requirements. With 12+ years of experience in Information Security, IAM, ISO 27001, Vendor Risk Management, and Cloud Security, I support security assessments, vendor reviews, security questionnaires, risk assessments, and policy development.
Experienced cybersecurity professional supporting large enterprise environments and delivering practical, business-focused solutions that help organizations improve security posture, demonstrate compliance, and build trust with customers, partners, and stakeholders.
Competenze
Diana R
offline •
Tempo di risposta medio: 1 ora
Consulta i miei servizi
Programmazione e tecnologia
I will perform iso 27001 internal audit and gap analysis
Programmazione e tecnologia
I will complete caiq sig and vendor assessments
Portfolio
Esperienza lavorativa
Information Security Specialist Engineer (Consultant)
University of the Andes (Colombia) • Full time
Oct 2025 - Nov 2025 • 1 mo
• Reviewed 100% of the security risk methodology in use and recommended executive-level reporting, improving the risk dashboard matrices. • Designed 100% of the internal secure data-erasure process, aligned with good practices. • Created a security due-diligence checklist for SaaS vendors. • Supported the Microsoft DLP implementation (60% completed); recommended the methodology that was adopted.
Telefónica
Full time • 12 yrs 6 mos
Senior Information Security Specialist
Apr 2022 - Apr 2025 • 3 yrs
1.Analyzed security architectures in technology projects and infrastructures, ensuring compliance with established controls aligned with corporate standards. 2.Resolved IAM-related incidents by coordinating with cross-functional teams and applying root cause analysis to prevent recurrence. 3.Managed and optimized information security KPIs, enabling effective monitoring of control performance and strategic decision-making. 4.Assessed security posture through hardening analysis, identifying gaps and proposing improvements in critical system configurations. 5.Conducted risk and threat analysis using specialized tools such as Prisma CSPM, contributing to proactive vulnerability detection in cloud environments. 6.Researched emerging threats and develop mitigation strategies. 7.Ensured regulatory compliance and the proper implementation of internal security policies and processes, supporting audits and regulatory reviews.
Information Security Specialist
Oct 2012 - Apr 2022 • 9 yrs 6 mos
1.Implemented and monitored logical access controls in cloud and on-premises infrastructures, ensuring secure identity and access management. 2.Assessed security posture through hardening analysis under SOX guidelines, identifying deviations and applying corrective measures in critical environments. 3.Validated security control compliance in RPA automations, ensuring alignment with corporate and regulatory standards, as well as securing controls implemented with vendors. 4.Maintained security controls aligned with SOX compliance requirements, supporting internal and external audit processes. 5.Collaborated with internal audit teams to provide IAM evidence and documentation aligned with SOX and ISO 27001 requirements.
