Freelancer profile translated to English.

Description

Cybersecurity, Privacy & GRC Advisor with experience supporting organizations in strengthening their cybersecurity, compliance, and risk management capabilities from a strategic and business-aligned approach.

Specialized in Virtual CISO Advisory initiatives, ISO 27001, NIST, SOC2, Readiness, GDPR & Privacy Governance, and Cyber Risk Management for fintechs, SaaS companies, and growing organizations that require strengthening their security posture, regulatory preparedness, and trust with clients and third parties.

Experience supporting executive stakeholders, compliance programs, audits, risk management, and security strategies oriented towards organizational maturity and business continuity.

Currently supporting organizations in LATAM under remote, flexible, and scalable advisory models.

Industry field of expertise

Languages

Spanish
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

Crehana
SECURITY LEAD & DATA PRIVACY OFFICER (DPO)
EDUCATION AND E-LEARNING
June 2025 - February 2026 (8 months)
Bogotá, Colombia
• •Lead the information security and data protection strategy and operation for a high-growth SaaS platform on AWS, ensuring the confidentiality, integrity, and availability of information for +200,000 clients and thousands of end-users.
• •Design and implement native cloud security controls, optimizing the security posture in a multi-tenant and shared responsibility environment with AWS.
• •Develop and maintain the risk management program, identifying, assessing, and mitigating threats specific to the SaaS and digital education environment.
• •Ensure the implementation of regulatory compliance in personal data protection (GDPR, LOPD Colombia, LOPD Ecuador, LOPD Peru) and cybersecurity for LATAM markets.
• •Collaborate closely with product and engineering teams in integrating Security by Design and Privacy by Design into the Software Development Life Cycle (SDLC).
• •Manage security incidents, emergency response, and communication with clients and stakeholders.
Cybersecurity Risk Management ISO 27001 NIST GDPR Compliance
INFOLAFT S.A.S.
CISO - OFFICER
CONSULTING AND AUDITS
March 2025 - June 2025 (3 months)
Bogotá, Colombia
• •Responsible for designing and implementing the information security and cybersecurity strategy, ensuring the protection of sensitive data within the framework of regulatory compliance for AML/CFT prevention.
• •Cyber risk management and development of controls aligned with international standards such as ISO/IEC 27001, NIST, and SOC 2, strengthening the security posture and the confidence of clients and regulatory bodies.
ISO 27001 NIST Risk Management Cybersecurity CISO
RCN Televisión
INFORMATION SECURITY OFFICER
ENTERTAINMENT AND LEISURE
August 2021 - October 2024 (3 years and 2 months)
Bogotá, Colombia
• •Design, lead, and implement the information security and cybersecurity strategy, ensuring the protection of the Channel's strategic information.
• •Lead the identification, assessment, and mitigation of cyber risks and threats, developing control models that reduced the probability of incidents. Promote a proactive and resilient approach in cybersecurity management, aligned with business objectives and regulatory requirements.
Cybersecurity Cyber governance Risk Management NIST