Esteban Miranda

IT and audit professional with more than 15 years of experience in cybersecurity, infrastructure, IT audits, compliance, and risk assessment. Extensive experience in risk-based audits (ISO 27001), reviewing the design, implementation, and operational effectiveness of controls, including access management, network security, business continuity, logging, information assets, and vendor management. Skilled in multi-platform environments including SAP, Oracle, UNIX, Windows, and MacOS.

Certified in COBIT 5, CCNA, Scrum Master, Agile Coach, and holds a Master's Degree in Cybersecurity. Strong ability to analyze objective evidence, identify compliance gaps, and communicate findings clearly to technical and management teams.

Senior IT Auditor / Quality Assurance Advisor at BDO Panama (2024-12 – 2025-07)

Contract position

• Led IT audits and ISMS reviews, verifying policies, procedures, risk criteria, and evidence records for financial and commercial sector clients, focused on SOX/IFRS compliance.
• Evaluated security, change management, and operational controls aligned with COBIT, COSO, and ISO 27001.
• Assessed technical controls such as access management, backups, network security, and log monitoring.
• Prepared detailed audit reports and presented risk mitigation recommendations to management.

Senior IT Auditor at KPMG Panama (2022-09 – 2024-02)

• Planned and executed IT audit procedures within SOX engagements, testing GITCs and ITACs for financial and telecommunications clients.
• Validated operational and technical controls ensuring traceability with ISMS requirements.
• Analyzed risks and compliance gaps, providing recommendations.
• Performed audits based on frameworks such as ISO 27001, evaluating the maturity of security controls.
• Developed automated scripts in IDEA and VBA to improve efficiency in control testing and reporting.
• Collaborated with financial audit teams to align IT and financial audit findings.

External IT Consultant / Project Manager for TIGO at ByondIT (2021-09 – 2022-09)

• Represented B2B and Digital business units in IT project prioritization processes.
• Facilitated estimations, resource allocation, and risk communication between stakeholders and IT teams.
• Oversaw project implementation tracking, ensuring compliance with deadlines and quality standards.
• Supported deployment of updates on customer-oriented platforms.

Internal Control and Process Coordinator at EY Panama (2018-09 – 2019-06)

• Audited and optimized administrative, financial, and IT processes to strengthen internal controls.
• Led the regional implementation of the Business Relationship Evaluation Tool and enhancements to the reimbursement request system.
• Achieved a 50% reduction in representation expenses through reimbursement process improvements.
• Provided training to regional teams on updated processes and systems.

Senior IT Auditor at Municipality of San José, Costa Rica (2011-01 – 2017-03)

More than 6 years of operational and audit experience in systems, networks, and security, following audit standards aligned with ISO 27001.

• Conducted technical audits evaluating controls currently included in ISO 27001 Annex A, ensuring objective evidence and traceability.
• Performed reviews of configurations, access controls, vulnerabilities, and logs with verifiable evidence.
• Coordinated corrective action implementation and follow-up testing with technical teams.

Master's Degree in Cybersecurity – OBS Business School

Master's Degree in Telecommunications and Networks – Univ. Latina

Bachelor's Degree in IT Project Management – UNED

Bachelor's Degree in Systems Engineering – Universidad Americana

Specialization in IT Auditing – University of Costa Rica