Open to opportunities

Gabriel Pineda

@gabrielpineda

Message

I’m a cybersecurity GRC professional improving risk assessments and compliance with HITRUST, SOC 2, and ISO 27001.

Mexico

Message

What I'm looking for

I want to continue building risk assessment and compliance programs that strengthen security frameworks, improve vendor and internal asset visibility, and drive measurable mitigation. I’m looking for a fast-paced, collaboration-focused team that values clear communication.

I’m a cybersecurity governance, risk, and compliance professional with over 4 years of experience improving risk assessment programs and strengthening security frameworks like HITRUST, SOC 2, and ISO 27001. I’ve led comprehensive vendor risk assessments—covering more than one thousand vendors and partners—and gathered validated audit evidence for PCI-DSS, SOX, SOC 2, and ISO 27001.

I build practical third-party risk and internal risk programs aligned with standards such as NIST RMF, and I track mitigation strategies across business units to drive accountability. I also bring a hands-on security mindset from roles in digital security and infrastructure, including optimizing security questionnaires with a 50% reduction in response time, managing Snyk vulnerability resolution, and supporting automation and security improvements using Python and Bash.

Experience

Work history, roles, and key accomplishments

Current

Governance, Risk and Compliance Analyst

Current

GlobalLogic

Feb 2026 - Present (5 months)

Conducts vendor and third-party risk assessments and mitigates identified security gaps. Gathers and organizes audit evidence for PCI-DSS, SOX, SOC 2, and ISO 27001 and tracks risk mitigation status across business units.

Risk Assessment Vendor Risk Management Audit Evidence PCI DSS SOX SOC ISO 27001 Risk Mitigation Third Party Risk Management

Governance, Risk and Compliance Analyst

TigerConnect

Jun 2025 - Feb 2026 (8 months)

Established an internal risk assessment program for assets using NIST RMF to improve executive visibility. Led HITRUST and SOC 2 recertification and managed third-party risk assessments (TPRM) and security questionnaire processes.

NIST RMF HITRUST SOC Third Party Risk Management (TPRM)Security Questionnaires Risk Assessment

Digital Security Specialist

Volaris

Sep 2024 - May 2025 (8 months)

Designs and reviews cybersecurity solutions to address vulnerabilities on the main website and other assets. Manages vulnerability remediation using Snyk and supports bot-attack mitigation using Imperva.

Cybersecurity Vulnerability Management Imperva Snyk Web Security

Cybersecurity/IT Trainee

Siemens

Nov 2023 - Sep 2024 (10 months)

Developed a demo for the Siemens DEX about IT/OT security to raise customer awareness of cyberattacks and related business impacts. Supported asset classification and protection processes and worked with vulnerability-related systems.

IT OT Security Security Awareness Vulnerability Management

Pega Intern

Rules Cube

Aug 2023 - Nov 2023 (3 months)

Completed training on the Pega Platform and participated in the design and development of Pega applications. Worked on creating and customizing Pega solutions using hands-on practice.

Pega Platform Low Code Development

Infrastructure Specialist Jr

Bit2bit Americas

Jul 2023 - Aug 2023 (1 month)

Assists with implementing ISO 27001 policies, including data privacy and information backups. Supports internal infrastructure operations, internal user management, and documents infrastructure IT solutions.

ISO 27001 Data Privacy Data Backup Infrastructure Management IT Automation User Management

Infrastructure Intern

Bit2bit Americas

Jan 2023 - Jul 2023 (6 months)

Managed internal infrastructure to keep operations running smoothly and supported infrastructure automation. Used Jira, Confluence, Bitbucket, AWS, and GitLab, and developed scripts in Python and Bash while designing and monitoring infrastructure tests.

Jira Confluence Bitbucket AWS Gitlab Python BASH Infrastructure Testing Automation

DevOps Specialist Intern

Bit2bit Americas

May 2022 - Jan 2023 (8 months)

Handled help desk and infrastructure support, resolving client tickets using Atlassian tools. Worked with GitLab, AWS (including S3), and GitLab CI/CD to support pipeline automations using Python/Bash.