Toño Herrera

Conducted security reviews and risk assessments for internal projects and vendors according to standards and policies. Supported business across all security review swim lanes including code scans, AI Red team, pentest, and threat modeling.

Established, defined, implemented, and continuously evaluated the Information Security Management System (ISMS). Aligned strategies, policies, and processes with compliance frameworks including PCI DSS and ISO 27K, and managed cybersecurity and data protection in cloud environments.

Advised organizations on maturing their Enterprise Application Security and Secure Development Lifecycle programs. Integrated security into DevOps processes and delivered solution strategies and implementations to clients.

Managed and led information security professionals to meet customer and business objectives. Oversaw the application security practice including vulnerability analysis, secure code design, code review, and penetration test management, and performed security project management using PMI techniques.

Managed the InfoSec framework for internal projects, ensuring compliance with contract specifications and regulatory requirements such as PCI DSS, ISO27001, HIPAA, and GDPR. Defined processes for user and access management, physical security, segregation of duties, and inventory of applications and systems.

Provided security support for internal users and clients in the financial sector, implementing security measures to ensure integrity, confidentiality, and availability of information. Ensured compliance with ISO27001, PCI DSS, DRP, and BCP standards.

Pursuing a Master's degree in Cybersecurity at UNIR México, expected to complete in 2025.

Diploma in Cybersecurity and Personal Data Privacy from UDLAP Jenkins Graduate School, completed in 2021.

Bachelor's degree in Computer Systems from Mexican University, completed in 2010.