Pablo Mezzadra

IT Security and Compliance professional with 6+ years of experience maintaining audit-ready environments, administering identity and access management platforms, and supporting ISO 27001 and SOC 2 compliance frameworks. Hands-on background in SaaS platform administration (Microsoft O365, Azure AD), access reviews, audit log monitoring, evidence collection, and security questionnaire management. Proven ability to build scalable, documented processes that keep organizations secure and compliant as they grow — with a strong compliance mindset and meticulous attention to documentation.

Business Information Security Officer (Local BISO) at NTT DATA Inc. – Group Corporation (2021-11 – 2026-03)

• Maintained audit-ready security documentation and evidence repositories supporting ISO 27001 certification cycles and ad-hoc compliance reviews.
• Administered Microsoft O365 and Azure AD environments, managing user provisioning, access revocation, and periodic access reviews to enforce least-privilege principles.
• Monitored audit logs and endpoint security controls, ensuring all systems remained compliant with internal security policies.
• Managed the full user lifecycle — onboarding and offboarding — including immediate access revocation, data backup coordination, and hardware recovery protocols.
• Handled security questionnaires from clients and third parties, coordinating with internal SMEs to deliver accurate, policy-aligned responses.

Computer Security Analyst at Identicum S.A. (2021-06 – 2021-09)

• Administered IAM platform (MicroFocus IDM) for user provisioning, access control, and segregation of duties across enterprise environments.
• Operated Active Directory and Remote Loader across Linux/Windows cross-platform environments; performed log analysis and error diagnostics to maintain system integrity.

IT Risk Assurance Associate at PwC – PricewaterhouseCoopers (2019-07 – 2020-07)

• Performed access reviews and SOD conflict analyses across enterprise ERP systems, ensuring compliance with internal security policies.
• Assessed logical security controls — password policies, privilege management, and audit log configurations — against client and regulatory benchmarks.
• Collected, organized, and validated audit evidence; produced structured documentation for client review and regulatory submission.

IT Risk Assurance Trainee at EY – Ernst & Young (Pistrelli, Henry y Asociados SRL) (2018-09 – 2019-01)

• Supported IT audit engagements: internal controls assessments, SOD reviews, and physical data center security audits at Big Four standard.

Systems Analyst – ORT Technical School (2021)