Founder and Director - Consulting Information Tech (CIT, S.A) - Operational Risk Management specialist, Technological and Operational risk audits, IT consultant.
CIT, S.A. is a firm dedicated to developing, consulting and auditing services for selected clients, specializing in Technological and Operational Risk issues applied under international standards, implementing easy-to-understand methodologies for the Company's end users.
Our motto:
Less risk, better IT works, we want to share it with all of you, through the exchange of experiences and knowledge acquired in our consultancies and consultancies.
Here're the latest consultancies I've completed:
Disaster Recovery Plan Specialist at CITSA - Unicomer Group - Retail Business - Nov 2017 - Apr 2018
• Disaster Recovery Plan Methodology, includes BIA, development of emergency procedures for critical processes (ISO 27031; ISO 22317).
• Risk IT Assesment Methodology includes risk treatment, upgrade controls and risk mitigation (ISO 27005)
• Information Security Management, upgrades controls objectives (ISO 27002)
•Analysis of IT Processes
Business Continuity Plan Specialist at CITSA - BANCORP - Feb 2017 – Mar 2018
• Business Continuity Plan (ISO 22301, Methodology DRII, ISO 31000, ISO 27005);
Professional Practices: Program Initiation And Management; Risk Assesment; Business Impact Analysis; Business Continuity Strategies; Plan Development and Implementation and Crisis Communications.
• Disaster Recovery Plan (ISO 27031, ISO 22317, ISO 31000, ISO 27005, ISO 27002).
Risk Management Specialist at CITSA - Seguros LAFISE - Insurance Business - Feb 2017 - Jun 2017
• Risk and Disaster Recovery Plan Methodology includes development of emergency procedures for critical processes (ISO 27031, ISO 31000, ISO 27005)
• IT Risk Management includes workshops for qualitative and quantitative for Risk IT assessment (ISO 31000, ISO 27005)
• Risk IT Assesment Methodology includes risk treatment, upgrade controls and risk mitigation
• Information Security Management (ISO 27001; ISO 27002)
Lead Auditor at CITSA - Hertz - Sep 2016 – May 2017
Employment Duration 9 mos
• Financial Audit (COSO, NIIF, NIAF)
• IT Audit Processes (COBIT), ISO 27002 (Information Technologies - Security Techniques - Code of Practices for Information Security).