Open to opportunities

Jorge Mario Ochoa

@jorgemarioochoa

Message

I build cybersecurity, SOC, compliance, and AI governance programs from the ground up.

Guatemala

Message

What I'm looking for

I'm looking to build and modernize security, SOC, compliance, and AI-governance programs where hands-on execution, executive partnership, automation, and measurable risk reduction matter.

I've built security programs, 24/7 SOC capabilities, and ISO/IEC 27001 and 22301 certifications from scratch for Millicom (Tigo), including a 4,500-user program and a regional security operation spanning multiple markets. As Regional CISO, I managed a US$7M+ budget, reported security posture to executive leadership and the Board, and governed a US$5M MDR contract.

Today, I advise legal, financial, pharmaceutical, telecommunications, retail, SaaS, and government clients through CSI LATAM on security program modernization, AI governance, vulnerability management, incident response, vendor risk, and SOC 2 and ISO compliance. I combine hands-on execution with executive leadership, using automation, risk-based remediation, and evidence-led audit work to create measurable outcomes.

Experience

Work history, roles, and key accomplishments

Current

Senior Cybersecurity Consultant

Current

CSI LATAM

Jan 2024 - Present (2 years 7 months)

Provides security program, AI-governance, and compliance advisory for clients across Latin America and Europe, including program build-out, AI security, vulnerability management, and client-facing compliance.

Security Program Management AI Governance Vulnerability Management Penetration Testing Incident Response ISO 27001 NIST CSF Vendor Risk Management

Current

Director, Cybersecurity Academy

Current

Panamerican Business School

Jan 2018 - Present (8 years 7 months)

Directs three executive certification programs (CISO, CTO, Chief Resilience Officer) and serves as executive faculty for governance, IT risk, and regulatory frameworks.

Cybersecurity Education Executive Education Governance Risk Management

President, ISC2 Guatemala Chapter

ISC2

Jan 2022 - Dec 2026 (4 years 11 months)

Led the ISC2 Guatemala Chapter, which was named ISC2 Best Chapter in Latin America twice during tenure, and participated in global committees.

Leadership Community Management Cybersecurity Advocacy

Headquarters Information Security Officer

Millicom (Tigo)

Jan 2022 - Dec 2024 (2 years 11 months)

Served as Regional CISO for a Nasdaq-listed telecommunications group across 11 markets, managing a $7M+ budget, reporting to executive leadership and the Board, and leading compliance, automation, and vendor governance initiatives.

Security Strategy Vendor Management Budget Management PCI DSS SOX Automation Zero Trust Access Control

Global Security Operations Center Manager

Millicom (Tigo)

Jan 2018 - Dec 2022 (4 years 11 months)

Built and managed the group's first global 24/7 SOC, covering 13 sites across Latin America, Africa, and corporate offices, and led incident response, metrics, and team leadership.

Security Operations Center Incident Response Managed Detection And Response Team Leadership Digital Forensics

Information Security Officer

Tigo Guatemala (Millicom)

Jan 2012 - Dec 2018 (6 years 11 months)

Managed IT and security program for 4,500+ users, led ISO 27001 and 22301 certification in 6 months, and reduced critical vulnerabilities by ~85% through risk-based remediation.

Security Program Management ISO 27001 Vulnerability Management Secure SDLC DevSecOps PCI DSS