Looking for a job

BearTech User

@jhaasoal

Message

I lead vendor risk assessments and AI security reviews for banking and corporate environments.

Peru

Message

What I'm looking for

I'm looking for information security work where I can lead third-party risk assessments, strengthen AI security controls, improve vulnerability management, and collaborate with stakeholders on practical, standards-aligned risk reduction.

At Scotiabank Peru, I lead third-party security risk assessments, review vendor controls, define remediation plans, and present security reports in English to Head Office in Canada.

I assess AI tools before adoption, audit their controls, and identify threats such as prompt injection, jailbreaks, and PII exposure. I also analyze vulnerabilities, strengthen security architectures, maintain policies, and support SOC monitoring and incident response.

Previously, I implemented cybersecurity platforms for Global Hitss and Claro Peru clients and managed vulnerability, risk, and threat-intelligence work at Banco Falabella Peru. My hands-on background includes Palo Alto, Fortinet, SIEM, EDR/XDR, WAF, Azure/Entra ID, ISO 27001, NIST CSF, MITRE ATT&CK, and OWASP.

Experience

Work history, roles, and key accomplishments

Current

Information Security Specialist

Current

Scotiabank Peru

Oct 2025 - Present (11 months)

Leads third-party and vendor security risk assessments, audits AI tools and controls, and presents vendor security reports in English to Head Office in Canada. Analyzes and designs security architectures, performs vulnerability analysis, and maintains security standards aligned with ISO 27001.

Third Party Risk Management Vendor Risk Assessment AI Security GRC ISO 27001 NIST CSF Vulnerability Management SOC SIEM EDR XDR WAF Python BASH Linux Jira Confluence Claude Code ChatGpt

Education

Degrees, certifications, and relevant coursework

Mississippi Gulf Coast College

AI for Cybersecurity , Artificial intelligence - Cybersecurity

2026 - 2026

Grade: 9

Texas A&M University TEEX

Professional Certificate, Cybersecurity

2025 - 2026

Completed a professional certificate in cybersecurity, resilience, and incident management, enhancing expertise in protecting critical infrastructure.