Kategorien durchsuchen
Entdecken
Fiverr Pro
Deutsch
$
USD
Diana R
@carolinacyberse
Systems Engineer and Cybersecurity Specialist
Polen
Englisch, Spanisch
Über mich
I help organizations strengthen cybersecurity, reduce risk, and meet compliance requirements. With 12+ years of experience in Information Security, IAM, ISO 27001, Vendor Risk Management, and Cloud Security, I support security assessments, vendor reviews, security questionnaires, risk assessments, and policy development.
Experienced cybersecurity professional supporting large enterprise environments and delivering practical, business-focused solutions that help organizations improve security posture, demonstrate compliance, and build trust with customers, partners, and stakeholders.
Kompetenzen
Diana R
offline •
Durchschnittliche Antwortzeit: 1 Stunde
Meine Dienstleistungen
Programmierung & Technik
I will perform iso 27001 internal audit and gap analysis
Programmierung & Technik
I will complete caiq sig and vendor assessments
Portfolio
Arbeitserfahrung
Information Security Specialist Engineer (Consultant)
University of the Andes (Colombia) • Vollzeit
Oct 2025 - Nov 2025 • 1 mo
• Reviewed 100% of the security risk methodology in use and recommended executive-level reporting, improving the risk dashboard matrices. • Designed 100% of the internal secure data-erasure process, aligned with good practices. • Created a security due-diligence checklist for SaaS vendors. • Supported the Microsoft DLP implementation (60% completed); recommended the methodology that was adopted.
Telefónica
Vollzeit • 12 yrs 6 mos
Senior Information Security Specialist
Apr 2022 - Apr 2025 • 3 yrs
1.Analyzed security architectures in technology projects and infrastructures, ensuring compliance with established controls aligned with corporate standards. 2.Resolved IAM-related incidents by coordinating with cross-functional teams and applying root cause analysis to prevent recurrence. 3.Managed and optimized information security KPIs, enabling effective monitoring of control performance and strategic decision-making. 4.Assessed security posture through hardening analysis, identifying gaps and proposing improvements in critical system configurations. 5.Conducted risk and threat analysis using specialized tools such as Prisma CSPM, contributing to proactive vulnerability detection in cloud environments. 6.Researched emerging threats and develop mitigation strategies. 7.Ensured regulatory compliance and the proper implementation of internal security policies and processes, supporting audits and regulatory reviews.
Information Security Specialist
Oct 2012 - Apr 2022 • 9 yrs 6 mos
1.Implemented and monitored logical access controls in cloud and on-premises infrastructures, ensuring secure identity and access management. 2.Assessed security posture through hardening analysis under SOX guidelines, identifying deviations and applying corrective measures in critical environments. 3.Validated security control compliance in RPA automations, ensuring alignment with corporate and regulatory standards, as well as securing controls implemented with vendors. 4.Maintained security controls aligned with SOX compliance requirements, supporting internal and external audit processes. 5.Collaborated with internal audit teams to provide IAM evidence and documentation aligned with SOX and ISO 27001 requirements.
