# Eliana Villamayor Eliana Villamayor is a remote worker on Himalayas, Especialista en GRC de Ciberseguridad at ITTI S.A.E. / Grupo Vázquez, based in Paraguay. Source: https://himalayas.app/@elianavillamayor ```text Cybersecurity GRC specialist at ITTI S.A.E. / Grupo Vázquez, managing Vanta risk and compliance across six companies. ``` | Detail | Value | | --- | --- | | Availability | Looking for a job | | Location | Paraguay | | Authorized to work in | Paraguay | | Salary expectations | 30k+ USD | | Job categories | Cybersecurity Specialist, Information Security Analyst, Cybersecurity Analyst | | Skills | Governance Risk and Compliance (GRC), Third Party Risk Management (TPRM), Security Risk Assessment, ISO 27001, PCI DSS, PCI PIN Security, MGCTI, NIST, CIS Controls, Security Controls, Risk And Control Matrices, Risk Treatment Plans, Compliance Audits, Vanta, Penetration Testing | | LinkedIn | https://linkedin.com/in/eliana-villamayor-86b324218 | ## About ```text At ITTI S.A.E. / Grupo Vázquez, I handled cybersecurity GRC functions for six companies, including ITTI, ueno bank, ueno Casa de Bolsa, ueno Seguros, upay, and wepa. I assessed third-party risks and managed Vanta environments, including risk workflows, controls, and compliance evidence. At Grupo Vierci, I led the project to structure the organization’s SOC/NOC area and conducted internal and external black-box and gray-box penetration tests. I also prepared technical and executive reports and contributed to security incident investigation and documentation. At Corporation SEKIURA, I participated in the company’s ISO/IEC 27001:2013 certification and helped create its SOC/NOC area. I implemented and administered Wazuh SIEM systems for clients, conducted penetration tests, and developed cybersecurity awareness training. ``` ## Experience ### Especialista en GRC de Ciberseguridad ITTI S.A.E. / Grupo Vázquez. Jun 2025 - Jan 2026 ```text Desempeñó funciones de GRC de ciberseguridad para seis empresas del grupo, incluyendo evaluación de riesgos de proveedores, elaboración de matrices de riesgos y seguimiento de controles. Participó en auditorías de cumplimiento de ISO/IEC 27001, PCI DSS y PCI PIN. ``` Skills: GRC, TPRM, Vanta, Jira, ISO-27001, PCI-DSS, PCI-PIN-Security, Gestión-De-Riesgos, Auditorías ### Analista de Seguridad de la Información Grupo Vierci. Jul 2024 - Jun 2025 ```text Lideró el proyecto para estructurar el área SOC/NOC, diseñó estrategias de protección y ejecutó pruebas de penetración internas y externas. Elaboró informes técnicos y ejecutivos, y desarrolló campañas de concienciación en ciberseguridad. ``` Skills: SOC, Pruebas-De-Penetración, Vulnerability-Analysis, SIEM, Wazuh, ManageEngine-(Zoho)-ServiceDesk-Plus, Concienciación-En-Ciberseguridad ### Responsable del Departamento de Ciberseguridad y Soporte Técnico CorporationSEKIURA. Nov 2019 - Jun 2024 ```text Supervisó los equipos de Ciberseguridad y Soporte Técnico, participó en la certificación ISO/IEC 27001:2013 y en la creación del área SOC/NOC. Implementó sistemas SIEM con Wazuh, ejecutó pruebas de penetración y desarrolló capacitaciones de concienciación. ``` Skills: ISO-27001, SOC, SIEM, Wazuh, Pruebas-De-Penetración, Kaspersky, SmartFense, Checkpoint, Freshdesk, SAP-Business-One ### Asistente de Soporte Técnico DATALAB. May 2019 - Nov 2019 ```text Atención a clientes, asistencia técnica y mantenimiento de equipos informáticos y servidores Dell. ``` Skills: Soporte-Técnico, Mantenimiento-De-Equipos, Dell-Server-Hardware ### Desarrolladora de Sistemas de Información Fortaleza Inmuebles. Mar 2019 - Apr 2019 ```text Desarrolló un sistema CRM utilizando ASP.NET Core, Web API, Entity Framework, C#, CSS, JavaScript y SQL Server Management Studio. ``` Skills: ASP.NET-Core, Web-APIs, Entity-Framework, C#, CSS, JavaScript, SQL-Server-Management-Studio ### Tester de Sistemas de Información Banco Continental. Feb 2019 - Mar 2019 ```text Realizó control de calidad de aplicaciones desarrolladas en C#, documentó pruebas y casos, y realizó consultas y análisis PL/SQL. ``` Skills: Control-de-calidad, C#, Pl-SQL, Test-documentation ### Asistente de Soporte Técnico TASSER. Jun 2014 - Dec 2018 ```text Atención de usuarios, reparación y mantenimiento preventivo y correctivo de equipos informáticos. ``` Skills: Soporte-Técnico, Reparación-De-Equipos, Mantenimiento-Preventivo-Y-Correctivo ## Education ### Universidad Americana Derecho, Law. 2022 - Present ```text Currently pursuing a degree in Law, ongoing since 2022. ``` ### Instituto NETSYS PC Technician, Information Technology ```text Completed a PC technician course. ``` ### Universidad Católica Nuestra Señora de la Asunción Linux Enterprise Operations, Information Technology ```text Completed a course on Linux Enterprise operations. ``` ### Universidad Católica Nuestra Señora de la Asunción Linux Enterprise Server Administrator, Information Technology ```text Completed a course on Linux Enterprise Server administration. ``` ### Veeam Partner Portal Veeam Certified Engineer 2023, Information Technology. 2023 - 2023 ```text Earned the Veeam Certified Engineer 2023 credential. ``` ### Smartfense SmartFense – Platform Administration, Information Security ```text Completed a course on SmartFense platform administration. ``` ### Smartfense SmartFense – Platform Implementation, Information Security ```text Completed a course on SmartFense platform implementation. ``` ### Kaspersky Certified Professional: Kaspersky Security Awareness for Enterprises (056.10), Information Security ```text Earned certification as a Kaspersky Security Awareness for Enterprises professional. ``` ### Kaspersky Sales Specialist: Kaspersky Endpoint Security for Business (S02.11.1), Information Security ```text Earned a sales specialist credential for Kaspersky Endpoint Security for Business. ``` ### Kaspersky Sales Specialist: Kaspersky Endpoint Security Cloud (S40.13), Information Security ```text Earned a sales specialist credential for Kaspersky Endpoint Security Cloud. ``` ### Kaspersky Accomplishment Technical: Encryption (008.104), Information Security ```text Earned a technical accomplishment in encryption. ``` ### Kaspersky Certified Professional: Kaspersky Endpoint Security and Management (002.11.1), Information Security ```text Earned certification as a Kaspersky Endpoint Security and Management professional. ``` ### Kaspersky Certified Professional: Kaspersky Security for Microsoft Office 365 (041.12), Information Security ```text Earned certification as a Kaspersky Security for Microsoft Office 365 professional. ``` ### Corporativo IT Bootcamp SC-900 Microsoft Security, Compliance, and Identity Fundamentals, Information Security ```text Completed a bootcamp on Microsoft Security, Compliance, and Identity Fundamentals. ``` ### LNXNETWORK Ethical Hacking for Networking, Ethical Hacking ```text Completed a course on ethical hacking for networking. ``` ### LNXNETWORK Ethical Hacking Labs I, II and III, Ethical Hacking ```text Completed ethical hacking labs I, II, and III. ``` ### LNXNETWORK Computer Forensics, Digital Forensics ```text Completed a course on computer forensics. ``` ### Latin American Academy of Cybersecurity Digital Forensic Analysis, Digital Forensics ```text Completed a course on digital forensic analysis. ``` ### Corte Suprema de Justicia Diplomado en Delitos Informáticos y Evidencia Digital, Digital Forensics ```text Completed a diploma in computer crimes and digital evidence. ``` ### Trend Micro Ransomware Fundamentals, Information Security ```text Completed a course on ransomware fundamentals. ``` ### INTEDYA Basic Concepts of IT and their Application in Information Security Management Systems, Information Security ```text Completed a course on basic IT concepts applied to information security management systems. ``` ### LNXNETWORK SOC Analyst, Information Security ```text Completed a course on SOC analysis. ``` ### LNXNETWORK IT Auditing, Information Technology ```text Completed a course on IT auditing. ``` ### INTEDYA ISO 27001:2013 Information Security Management Systems, Information Security ```text Completed a course on ISO 27001:2013 Information Security Management Systems. ``` ### Instituto del Banco Central del Paraguay (IBCP) Sistema Nacional de Pagos: pagos ágiles, seguros e interoperables, Finance ```text Completed a 2-hour course on the national payment system in November 2025. ``` ### Vanta Verified Vanta Admin, Information Security ```text Earned the Verified Vanta Admin credential in September 2025. ``` ### Centro Tecnológico UCSA Curso Experto en Gestión de Riesgos en la Seguridad de la Información, Information Security. 2025 - 2026. Grade: Aprobado ```text Completed a 66-hour expert course in information security risk management from November 2025 to March 2026. ``` ### Colegio Técnico y Centro de Entrenamiento Vocacional «Pdte. Carlos Antonio López» Bachiller Técnico en Servicios Informáticos, Computer Services. 2011 - 2013 ```text Completed technical high school in computer services from 2011 to 2013. ``` ### Universidad del Norte Ingeniería Informática, Computer Engineering Activities and societies: Won PRICILA research program in 2022; first author of an article on sandboxing. ```text Pursuing a degree in Computer Engineering, with thesis presented in September 2026. ``` ## Tech stack - ASP.NET Core - Jira - JavaScript - C# - PowerShell - ManageEngine EventLog Analyzer - Nagios - Wireshark - Linux - Kali Linux - VirtualBox - FortiAnalyzer - Vanta - FreshDesk - Burp Suite - Metasploit - Bash - Wazuh - Kaspersky Endpoint Security - VirusTotal - Microsoft Project To contact Eliana, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Andrés Ortiz](https://himalayas.app/@andresortiz): IT Director, Tech enterprise - [Ahmad Hijazi](https://himalayas.app/@ahmadhijazi): SOC Incident Response Analyst, Paraná Country Club - [Osvaldo Plabst Urunaga](https://himalayas.app/@osvaldoplabsturunaga): Analista de TI, Parque Tecnológico Itaipu - [Marco Aponte](https://himalayas.app/@marcoaponte): Cybersecurity and Compliance Analyst, MentorMate - [Rolando Strahm](https://himalayas.app/@rolandostrahm): Full Stack Developer Project Manager, Grupo INVENTIVA SACI - [Juan Sebastian Martinez](https://himalayas.app/@juansebastianmartine1): Cyber Security Architect (COE), Prisma MP - [Melisa Ruiz N](https://himalayas.app/@melisaruizn): WiCyS Vulnerability Disclosure Program Participant, WiCyS - [Federico Ballesteros](https://himalayas.app/@federicoballesteros): CTO / Director de Tecnologia, Netinfo - [Darío Abelardo Cárdenas Talavera](https://himalayas.app/@daroabelardocrdenast): Analista, Tribunal Superior de Justicia Electoral - [Ruth Prieto](https://himalayas.app/@ruthprieto): Analista Funcional TI, ITTI Digital