Jorge Larios Luquín

Cybersecurity GRC leader with 13+ years of progressive experience across IT Audit, Risk Management, and Compliance in global, regulated environments. Proven track record designing and operating enterprise risk lifecycles - from identification and assessment through treatment, acceptance, and continuous monitoring - across cloud, identity, endpoint, and SaaS platforms. Skilled at translating regulatory requirements and threat intelligence into defensible control baselines, risk registers, and executive-ready reporting that drive measurable remediation outcomes.

Deep experience with SOX ITGCs, ISO 27001, NIST CSF, and IAM governance; adept at engaging senior stakeholders and leading cross-functional teams to land sustained risk reduction.

Principal I, Cybersecurity GRC at Herbalife International (2025-05 – Present)

• Own end-to-end risk lifecycle for technology domains including cloud, identity, and SaaS platforms; maintain an authoritative risk register and deliver reporting cadences to senior technology leaders.
• Serve as SME and strategic advisor on IT governance, risk management, and compliance best practices; translate regulatory drivers (SOX, GDPR, ISO 27001) into prioritized control roadmaps with measurable outcomes.
• Lead design and implementation of GRC tools, processes, and risk frameworks across the Global Digital & Technology Services organization.
• Drive IAM governance and access certification programs; define provisioning lifecycle, entitlement controls, and remediation workflows that reduce identity risk exposure.
• Conduct technology and security risk assessments across multi-domain environments; identify control weaknesses and translate findings into structured remediation plans tied to business risk appetite.
• Mentor and develop GRC team members on risk management best practices, policy compliance, and audit readiness.

Sr. Auditor, Cybersecurity GRC at Herbalife International (2023-01 – 2025-05)

• Independently executed periodic System Access Reviews (SAR) and GDPR compliance testing; served as IAM team lead, defining provisioning, de-provisioning, reconciliation, and certification processes.
• Led root cause analysis for cybersecurity audit deficiencies; designed remediation plans, tracked to closure, and performed effectiveness/validation testing—delivering structured management reporting on remediation status.
• Performed independent testing of Cybersecurity department processes for compliance with Herbalife policy, third-party contracts, and applicable government regulations.
• Built and maintained stakeholder relationships across organizational levels to support the Cybersecurity Compliance Program and facilitate timely control remediation.

Internal Audit IT Assistant Manager at Flex (2022-10 – 2023-01)

• Led IT audit execution and planning, guiding cross-functional teams to deliver high-quality audit work aligned with IIA standards and the Internal Audit charter.
• Partnered with IT and Finance Compliance teams to scope, plan, and execute SOX ITGC audits; drove creation of management action plans and tracked remediation of audit observations.
• Managed external auditor relationships and coordinated evidence production; championed data analytics integration and continuous auditing methodologies to improve risk coverage.

Lead IT Internal Auditor at HP Inc. (2021-04 – 2022-10)

• Led end-to-end IT audit engagements across global technology processes including SOX ITGC, SDLC, and access management controls.
• Coordinated with international audit teams and IT management to deliver risk-based audit plans and timely remediation follow-up.

IT Internal Auditor at HP Inc. (2018-08 – 2021-03)

• Executed IT General Controls (ITGC) testing across SAP S/4 HANA, P2P, and Q2C processes; documented control evidence and tracked findings through remediation.
• Supported SOX automated control reviews (CnC, OTC, PTP, TSY) and SDLC audit assessments for major ERP transformation programs.

Senior Consultant and Analyst at Deloitte (2010-03 – 2017-05)

• Delivered risk, compliance, and internal control engagements for clients across manufacturing, financial services, and distribution sectors.
• Conducted SOX readiness assessments, control design evaluations, and audit support across ERP environments.

Master's in Information Technology – Universidad de Guadalajara (2017 – 2019)

Bachelor in Business Administration – Universidad de Guadalajara (2005 – 2009)