




Job Summary: Experienced professional in GRC, auditing of critical environments, identity management, and regulatory compliance within the financial and technology sectors. Key Highlights: 1. Strong expertise in GRC, auditing, and regulatory compliance 2. Blue Team profile with strategic vision and hands-on security operations 3. Responsible for adherence to frameworks such as PCI DSS, ISO 27001, and NIST Experienced professional in Governance, Risk, and Compliance (GRC), with strong track record in auditing critical environments, Identity and Access Management (IAM), and regulatory compliance in the financial and technology sectors. Responsible for ensuring organizational adherence to frameworks and standards such as PCI DSS, ISO 27001, SOX, and NIST, translating regulatory requirements into technical and operational controls. Blue Team profile with strategic vision, actively engaged in hands\-on administration and continuous improvement of security solutions, including: * SIEM, XDR, ZTNA, CASB, and DLP; + Integration and automation of CI/CD pipelines; + Implementation and management of SAST/DAST analysis tools; + Direct support to infrastructure, development, and compliance teams. Conduct internal audits to prepare for certification bodies; Manage the identity and access lifecycle (IAM); Analyze evidence and develop corrective action plans for non-conformities; Support incident response and propose control improvements; Produce compliance and risk reports for executive leadership and auditors.


