Gerardo Amendola

Served as Technical Expert Witness for litigation related to digital harassment and reputational damage. Conducted forensic analysis of social media evidence and drafted technical opinions on doxing and privacy risks.

Coordinated security questionnaires, RFPs, and client audits, and collaborated with Engineering, Legal, and Sales teams to gather technical evidence. Maintained control frameworks such as SOC 2 and ISO 27001 using Drata, and supported security controls for AI data processing.

Planned and executed IT and security audits aligned with ISO 27001 and COBIT, reducing vulnerabilities by 35%. Ensured compliance with PCI-DSS, SOX, and ISO 27001, and collaborated with IT teams on risk mitigation.

Managed IT infrastructure and security controls to ensure business continuity and compliance. Conducted risk assessments, implemented security hardening, and delivered training to promote security awareness.

Managed network infrastructure including servers, routers, and firewalls. Oversaw operational continuity and improved system uptime and user satisfaction.

Provided IT consulting and compliance advisory for financial and healthcare clients. Supported SAP ERP implementations and delivered training on IT governance.

Managed the information security risk program and IT risk strategy. Conducted compliance and risk assessments, monitored critical risk issues, and provided technical support to staff.

Bachelor's Degree in Computer Science Engineering from Universidad Catolica de Honduras, completed in 2012.

Certification as ISO/IEC 27001:2022 Lead Auditor.

Certification as ISO/IEC 27001:2022 Internal Auditor.

Certification in Google Cybersecurity: Foundations, Network Security, Risk Management.

Certification in Cybersecurity Awareness.