Ver categorias
Explorar
Fiverr Pro
Português
$
USD
Diana R
@carolinacyberse
Systems Engineer and Cybersecurity Specialist
Polônia
Inglês, Espanhol
Sobre mim
Cybersecurity Specialist with 12+ years of experience helping organizations strengthen security, compliance, and risk management. Experienced in ISO 27001, SOC 2 readiness, IAM, security questionnaires, vendor risk assessments, cloud security, and information security policies. Formerly with Telefónica, supporting enterprise environments and regulatory compliance. I deliver practical, business-focused security solutions that help organizations reduce risk and meet compliance requirements.
Habilidades
Diana R
offline •
Tempo médio de resposta: 1 hora
Conheça meus serviços
Programação e Tecnologia
I will perform iso 27001 gap analysis and compliance review
Programação e Tecnologia
I will complete security questionnaires and vendor risk assessments
Portfólio
Experiência profissional
Information Security Specialist Engineer (Consultant)
University of the Andes (Colombia) • Período integral
Oct 2025 - Nov 2025 • 1 mo
• Reviewed 100% of the security risk methodology in use and recommended executive-level reporting, improving the risk dashboard matrices. • Designed 100% of the internal secure data-erasure process, aligned with good practices. • Created a security due-diligence checklist for SaaS vendors. • Supported the Microsoft DLP implementation (60% completed); recommended the methodology that was adopted.
Telefónica
Período integral • 12 yrs 6 mos
Senior Information Security Specialist
Apr 2022 - Apr 2025 • 3 yrs
1.Analyzed security architectures in technology projects and infrastructures, ensuring compliance with established controls aligned with corporate standards. 2.Resolved IAM-related incidents by coordinating with cross-functional teams and applying root cause analysis to prevent recurrence. 3.Managed and optimized information security KPIs, enabling effective monitoring of control performance and strategic decision-making. 4.Assessed security posture through hardening analysis, identifying gaps and proposing improvements in critical system configurations. 5.Conducted risk and threat analysis using specialized tools such as Prisma CSPM, contributing to proactive vulnerability detection in cloud environments. 6.Researched emerging threats and develop mitigation strategies. 7.Ensured regulatory compliance and the proper implementation of internal security policies and processes, supporting audits and regulatory reviews.
Information Security Specialist
Oct 2012 - Apr 2022 • 9 yrs 6 mos
1.Implemented and monitored logical access controls in cloud and on-premises infrastructures, ensuring secure identity and access management. 2.Assessed security posture through hardening analysis under SOX guidelines, identifying deviations and applying corrective measures in critical environments. 3.Validated security control compliance in RPA automations, ensuring alignment with corporate and regulatory standards, as well as securing controls implemented with vendors. 4.Maintained security controls aligned with SOX compliance requirements, supporting internal and external audit processes. 5.Collaborated with internal audit teams to provide IAM evidence and documentation aligned with SOX and ISO 27001 requirements.
