Ludrian Marrero

Led the end-to-end security issue management lifecycle, including triage, root cause analysis, remediation planning, and closure. Supported AI/ISO 42001/ISO 27001/NIST CSF/SOX/SOC 2/PCI DSS audits and used GRC tools to track risk, control performance, and compliance metrics.

Coordinated IT and cybersecurity efforts across North America and LATAM and served as Business Information Security Officer (BISO). Conducted enterprise-wide IT risk assessments across 10+ countries, led third-party risk reviews (50+ vendor contracts), and implemented cybersecurity awareness programs that trained 2,000+ employees.

Assessed and approved vendors using cybersecurity and compliance frameworks, and reviewed vendor impacts on systems, applications, and sensitive data. Led remediation efforts to improve the security posture (reducing risk exposure by 30%) and delivered phishing/awareness training that increased employee threat recognition by 40%.

Provided cybersecurity consulting, including risk assessments and evaluations of external service providers across multiple industries. Designed assessment frameworks and implemented partner risk management programs aligned with SOC 2, GLBA, SOX, FedRAMP, and related security standards.

Developed Amerant Bank GRC programs by implementing CoBIT 5, ISO 27001, NIST 800, and FedRAMP to enforce internal controls across on-premises and cloud systems. Led access rights reviews to support SOX/GLBA/FedRAMP compliance and directed phishing prevention initiatives that reduced employee susceptibility to phishing attacks by over 45%.

Conducted end-to-end risk assessments across the project lifecycle to minimize security gaps across software, networks, databases, middleware, and hardware. Led IT security audits and integrated GRC protocols into information security practices using CoBIT 5, ISO 27001, NIST 800, and FedRAMP.

Performed audits of access controls, including privileged access, role-based permissions, password policies, and change management protocols, and delivered recommendations to remediate critical control gaps. Secured databases, servers, and operating systems, assessed network perimeter defenses, and applied IT governance frameworks to support compliance with GLBA, SOX, PCI, and HIPAA.

Conducted risk assessments for service providers across the corporation and its subsidiaries and reviewed SOC 2 reports and security questionnaires to support procurement decisions. Performed application risk assessments with threat modeling and residual risk scoring and contributed to SOX audit reviews while delivering security awareness content.

Designed and maintained MS Access databases to streamline banking operations and built reporting outputs for department performance and financial services. Developed reports using Crystal Reports, SAP Business Objects, and ODBC, and resolved technical issues involving database corruption, program failures, and network problems.

Earned a Master in Computer Science (MCS) with a focus on IT Management & Information Assurance.

Earned a Bachelor of Science in Business Administration (BBA) with a concentration in Information Systems.