Open to opportunities

Humberto Salcedo

@humbertosalcedo

Message

Specialist in IT Audit, Cyber Risk, and Compliance, with proven experience in security controls.

Peru

Message

What I'm looking for

I am open to new roles in Cybersecurity, IT Audit, or related areas, where I can grow, learn, and make a meaningful impact.

I'm a curious guy who enjoys self-taught learning and continuous skill improvement. I enjoy solving tough problems in fast-paced, high-pressure situations where quick thinking is essential.
- Strong communication and problem-solving skills.
- Experienced in identifying threats, risks, and vulnerabilities.
- Love learning how clients make money.
I have a paper published in Springer, take a look at it!
https://link.springer.com/chapter/10.1007/978-3-030-75680-2_40

Experience

Work history, roles, and key accomplishments

Current

InfoSec Assurance Auditor

Current

Thoropass

Aug 2024 - Present (1 year 9 months)

Responsible for verifying security controls in the cloud based on information security frameworks. Translate compliance requirements into actionable tasks and review cloud configurations to ensure security and privacy.

SOC2 Cloud Security Compliance Security Auditing Risk Assessment Information Security Cybersecurity Problem Solving Communication Automation

Staff InfoSec Risk & Compliance Analyst

Qualifacts

Aug 2023 - Aug 2024 (1 year)

Managed corporate compliance programs to mitigate cybersecurity risks, conducted security risk assessments, and ensured protection of assets and information.

Cybersecurity Audit Compliance Programs Risk Assessment SOC NIST CSF NIST 800 Security Management HIPAA FedRAMP HITRUST

IT Auditor

NIUBIZ

Jul 2022 - Aug 2023 (1 year 1 month)

Led IT audits across various domains including operations and cybersecurity, managed internal audit programs, and optimized risk assessment processes.

IT Auditing Risk Management Cybersecurity Audit Reporting Compliance Change Management Vendor Management Cloud Security Operations Management

Information Security Analyst

EVOL - TSnet S.A.

Feb 2022 - Jun 2022 (4 months)

Managed SOX compliance efforts, developed secure disposal procedures for IT equipment, and conducted risk management and access reviews.

SOX Compliance Risk Management ISO 27001 NIST CF Access Management Policy Development Security Procedures IT Equipment Disposal Compliance Auditing

Information & Cyber Security Analyst Jr.

TRANZACT, a Willis Towers Watson Company

May 2020 - Feb 2022 (1 year 9 months)

Supported audit and compliance coordination, managed integration of privileged access groups, and conducted physical access reviews and audits.

NIST CSF HIPAA Audit Coordination Access Reviews Cybersecurity Project Management Compliance Risk Assessment User Access Management

IT Project Analyst

GLOBAL SERVICE INNOVATION S.A.C.

Dec 2018 - Feb 2020 (1 year 2 months)

Led software development projects for startups, focusing on cybersecurity requirements and ensuring secure coding practices.

Project Management Software Development Cybersecurity Secure Coding Risk Assessment Business Profitability Documentation MVP Development Process flow design

Education

Degrees, certifications, and relevant coursework

Royal Holloway, University of London

Master of Science, Cybersecurity

2024 - 2026

Pursuing a Master of Science in Cybersecurity, focusing on advanced topics in cybersecurity, risk management, and privacy.

Royal Holloway, University of London

Master of Science in Cybersecurity, Cybersecurity

2023 -

Pursuing a Master of Science in Cybersecurity at Royal Holloway, University of London (ongoing). Focus on cybersecurity studies aligned to practical security and compliance needs.

ESAN - Graduate School of Business

Postgraduate Degree, Cybersecurity & Privacy Management

2023 - 2023

Completed a Postgraduate Degree in International Diploma in Cybersecurity & Privacy Management, emphasizing global cybersecurity standards and practices.