Looking for a job

Ariel Orsino

@arielorsino

Message

Information Security Manager at Bizland Tech, leading PCI DSS certification and AI security governance.

Argentina

Message

At Bizland Tech, I lead information security for LATAM, including PCI DSS implementation, monitoring, and certification for a Level 1 Service Provider. I also develop security policies and controls aligned with ISO 27001, NIST Cybersecurity Framework, CIS, and COBIT.

I define AI governance and acceptable-use policies, and assess security risks in AI/LLM tools, including prompt injection and data leakage. I’ve also automated compliance evidence collection for PCI DSS and ISO 27001 audits, along with user access reviews and IAM/PAM reporting.

Previously, at Worldline Global, I served as Information Security Officer and Data Protection Officer for LATAM, coordinating PCI DSS and ISMS activities, data protection assessments, and security incident remediation. My earlier work includes ISO 27001 implementation and audits at Atos IT Solutions and Services S.A.; I hold IRCA ISO 27001 Lead Auditor and CEH certifications.

Experience

Work history, roles, and key accomplishments

Current

Information Security Manager LATAM

Current

Bizland Tech

Jan 2023 - Present (3 years 10 months)

Led information security for LATAM at a PCI DSS Level 1 Service Provider, overseeing governance, compliance, cloud security, security operations, and application security. Drove PCI DSS implementation, monitoring, and certification, and implemented security controls under ISO 27001, NIST CSF, CIS, and COBIT.

PCI DSS ISO 27001 NIST Cybersecurity Framework CIS COBIT Security Governance Risk Management AWS Cloud Security IAM PAM SIEM Vulnerability Management Application Security AI Security Automation Team Leadership

Information Security Officer & Data Protection Officer LATAM

Worldline Global

Jan 2013 - Dec 2022 (9 years 11 months)

Served as Information Security Officer, Data Protection Officer, and Country Safe & Safety Officer for Worldline LATAM. Managed information security governance, implemented global security strategies and policies, and coordinated PCI DSS and ISMS implementation and monitoring.

PCI DSS ISO 27001 ISO 17799 COBIT RiskIT Data Protection Risk Management Business Continuity Security Operations IAM PAM Vulnerability Management Security Awareness KPIs

Information Security Officer (ISO)

Atos IT Solutions and Services S.A.

Jan 2010 - Dec 2013 (3 years 11 months)

Managed information security for HTTS & SB service lines in LATAM and ARG Systems Integration. Implemented and maintained ISO/IEC 27001:2005, developed security policies and controls, and managed risks, vulnerabilities, and incidents.

ISO 27001 ISAE 3402 Engagements ISO 20000 ITIL Risk Management Vulnerability Management Incident Management Business Continuity Data Protection Security Audits Security Awareness

Líder de Proyectos de Calidad

Siemens IT Solutions and Services S.A.

Jan 2006 - Dec 2010 (4 years 11 months)

Led and coordinated analyst teams on projects for large public and private sector clients. Managed requirements gathering, effort estimation, resource selection, task assignment, and team coordination, with client and service provider interaction.

Project Management Team Leadership Requirements Analysis CMMI ISO 9001 Client Management Metrics And Reporting

Analista

Siemens Itron Business Services S.A.

Jan 2005 - Dec 2006 (1 year 11 months)

Automated application testing using IBM Rational Robot, including requirements analysis, test plan design, SQA Basic script development, execution, and incident reporting. Performed functional, system, stress, volume, performance, concurrency, and regression testing.

Rational Robot SQABasic Testing Automation Functional Testing Performance Testing Regression Testing Incident Management

Analista

Calipso Software S.A.

Jan 2003 - Dec 2005 (2 years 11 months)

Performed functional analysis and development, including business rules, web application development, end-user documentation, training, and user support. Managed incident and change reporting, resolution, and tracking.