Open to opportunities

Felipe Gonzalez Arcos

@felipegonzalezarcos

Operations and Risk leader transitioning into GRC-focused cybersecurity, blending ISO 45001 compliance with security governance.

Colombia

Message

What I'm looking for

I’m seeking a remote Junior GRC Analyst or Cybersecurity Analyst role where I can apply audits, risk assessments, and governance to real environments, grow fast in GRC and security operations, and support compliance with strong, measurable outcomes.

I’m an Operations and Risk Manager and Co-Founder with a strong Occupational Health and Safety background and a technical foundation in Information Systems. I build compliance programs that hold up in real operations—using audits, risk frameworks, and corrective action to protect people, facilities, and continuity.

In my current role at Infinitar S.A.S., I spearheaded enterprise risk management within an OHSMS for corporate construction projects, driving ISO 45001-aligned safety audits, facility inspections, PPE control, and incident response. I lead root cause investigations, report to regulatory bodies, and implement CAPA to strengthen outcomes over time—while also managing payroll operations, social security affiliations, and regulatory reporting.

I’m actively transitioning into cybersecurity with a Governance, Risk, and Compliance (GRC) focus, integrating physical risk management frameworks (ISO 45001, OHSMS) with information security principles. I’m pursuing ISC2 Certified in Cybersecurity (CC) (in progress) and preparing for Microsoft SC-900, while drawing on prior security monitoring experience (24/7 access control and incident logging with Milestone XProtect and OnGuard) and hands-on technical support using Linux, Jira, and data migration practices.

Experience

Work history, roles, and key accomplishments

Current

Operations and Risk Manager

Current

Infinitar S.A.S.

Aug 2024 - Present (1 year 10 months)

Spearheaded enterprise risk management and OHSMS compliance for corporate construction projects, driving ISO 45001-aligned safety audits, facility inspections, and PPE controls. Managed incident response with root cause investigations and CAPA, and administered payroll and social security compliance to ensure regulatory adherence.

ISO 45001 Enterprise Risk Management Safety Audits Incident Response Root Cause Analysis CAPA Regulatory Compliance Payroll Compliance PPE Control

CPG Developer - Technical Ops

Avidbots Corp

Sep 2021 - Mar 2022 (6 months)

Engineered and configured end-to-end deployment plans for autonomous robots, from client specifications and site mapping through production rollout. Optimized robotic path planning and navigation in Linux using RViz simulations, documented SOPs, and supported troubleshooting to deliver successful autonomous cleaning implementations.

RViz Simulations Robotics Navigation

Help Desk Executive (Tier 1)

Phidias

Jan 2020 - Apr 2021 (1 year 3 months)

Provided Tier 1 support for Phidias Academic SaaS, resolving incidents via Jira, live chat, and email while meeting SLA requirements. Led secure data migrations for enrollment, grading, and billing modules, and customized HTML templates and CRM communication components to streamline report and notification generation.

Tier 1 Support SLA Management Data Migration Data Integrity Technical Documentation Client Training

Technology & Security Analyst

EPSA (Celsia)

Jul 2018 - Dec 2019 (1 year 5 months)

Performed 24/7 monitoring of electronic security and access control systems for critical energy infrastructure using Milestone XProtect and OnGuard. Logged and responded to physical security alarms, troubleshooting surveillance platforms and producing security event reports to support preventive and corrective actions.

Access Control Milestone XProtect Physical Security Incident Logging