Patricio Santirso

Information Security Expert with more than 18 years of experience in multinational companies from diverse industries performing roles in the following areas of knowledge: Vulnerability Management - Patching, Pentest. End to end Remediation cycle follow up. IT Risk Management, Identity & Access Management – IAM, IT Security Program Manager, IT Service Manager, Cybersecurity - Incident Monitoring, Security & Policy Management, Third Party Risk Management and Reporting.

CyberSecurity Specialist at AES (2022-01 – Present)

Vulnerability Management - Patching. End to end Remediation cycle follow up.

• Manage and update CyberSecurity Dashboard by connecting different products into Azure Databricks for C-Level and Technical Reporting.
• Develop and track remediation plans with Business Leaders to address gaps.
• Prioritize remediation actions.
• Tools managed: Rapid7, Expanse, Acunetix 360, Defender.

IT Risk & Compliance Manager (Fintech) at Mercado Libre (2021-01 – 2022-12)

• Lead the IT Risk & Compliance team for MercadoLibre.
• Design and lead the evolution of IT Risk & Compliance by defining and implementing risk methodologies and enabling new capabilities.
• Assess Fintech related processes, APIs and Admins for MercadoPago product in order to identify risks.
• Interact with risk owners to establish action plans. Perform follow up on mitigation.
• Share results and projects to business stakeholders.

Governance, Risk & Compliance Lead at EY (2016-07 – 2021-05)

• Define strategy and actions to ensure integrity and Security of EY Assets.
• Establish Risk profiles by IT Service.
• Develop interactive Dashboards to enable business leaders' decision making.
• Follow up with IT teams on any audit related topic, ensuring responses are delivered timely and with quality.
• Security Consultancy for new technologies.
• Establish Information Security and Compliance Governance policies and processes to provide leadership all the information for better decision making. Privileged Access Process Practitioner.
• Lead Data Protection Initiatives to ensure compliance against regulations (GDPR, CCPA, and others). Oversee Information Security and Compliance Programs.
• Propose technology enhancements based on company's landscape of risks and threats.

Regional Service Delivery Manager at Mead Johnson Nutrition (2014-12 – 2015-11)

Responsible for IT Services, Security and Infrastructure at Offices, Third Party Logistics and Production Plants in South America region.

• IT Suppliers Management, lead technology innovation projects, implement Policies and Procedures.
• More than 10 direct reports distributed in South America.

IT Regional Governance Manager at DIRECTV (2012-06 – 2014-11)

• Define IT Processes and Policies for regional team.
• Define a Management System based on ISO 9001.
• Develop KPIs and Technology Performance Metrics.
• Success Story: Deploy a Supplier Management Policy that generated operational efficiencies and +15% cost savings.

Security & Risk Manager at IBM (2009-01 – 2012-06)

Security & Risk Manager for Major Accounts of pharmaceutical, bank and financial services industries. Responsible for Identity & Access Management, Security & Policy Compliance, Data Protection, Security Consultant Services. Active participation on audits (JSOX, SSAE16, Corporate, BCR). Lean Six Sigma Black Belt.

Security & Risk Team Leader at IBM (2007-01 – 2009-12)

Lead IAM & Compliance Teams providing services to customers. Managed IT Security Projects end to end according customer's requirements. Resolved Major Incidents and Customer escalations. Implemented Business Controls to ensure Audit readiness Status. Built new teams from scratch, including hiring, knowledge transfer and on-going training.

• Planned with Global Service Line Owners the annual growth for the area in terms of required skills and operational efficiencies.

IAM Team Coordinator at IBM (2005-01 – 2007-12)

Lead a team of 12 employees providing IAM Services to multi-industry customers in multiple platforms. Developed a methodology to mitigate Security Exposures or SLA breaches.

IAM Admin at IBM (2004-01 – 2005-12)

Provided Identity & Access Management Services to ensure authentication and authorization methods to systems are aligned to IBM Security Policy & customer's security standards. Ensure Compliance Key Process Indicators reach Organization's Targets.

Leadership Executive Program in Leadership – University Torcuato Di Tella (UTDT) (2019-01 – 2019-12)

Post-Degree in Business Administration – University Torcuato Di Tella (UTDT) (2013-01 – 2014-12)

Informatic Engineer in Informatics Engineering – University of Belgrano (2008-12)