Denise Moreno

Co-designed a GRC platform for cybersecurity consultants, including a 432-control framework mapped to 16 standards and a methodology for gap analysis, risk management, and GDPR compliance.

Provided GRC and cybersecurity consulting for clients in multiple countries, including owning a PCI DSS Attestation of Compliance, leading NIST CSF 2.0 assessments, and managing third-party risk.

Performed SOC monitoring, threat hunting, and threat intelligence reporting, and designed controls for ISO 27001 and ISO 15408 compliance.

Managed security architecture for administrative and OT networks across 50+ sites, conducted technology risk management and business impact analysis, and served as an internal ISO 27001 auditor.

Conducted security evaluations, risk analysis, and contingency planning to support operational continuity.

Designed and administered Cisco LANs and served as telecommunications technical lead for a CCTV rollout to over 200 sites.

Cybersecurity Awareness Professional Certificate (CAPC) from CertiProf in 2024.

ISO/IEC 27017 Lead Auditor - Cloud Auditor certification from Universidad de Santiago de Chile (USACH) in 2023.

Courses in Risk Management for Cybersecurity and IT Managers and ISO 27001 Cybersecurity Manager from Udemy in 2022.

Master's Degree in Information Security (Máster Universitario) from UNIR, Spain, completed between 2019 and 2020.

ISO 27001 ISMS Implementation and Business Continuity Plan Design and Management training from FONDONORMA in 2007.

Ethical Hacking and Countermeasures course from EC-Council in 2007.

Electronic and Computer Engineering degree from Universidad Yacambú, Venezuela, completed between 1997 and 2004.