Zulema Laborde
@zulemalaborde
I build ISO 27001, privacy, and security compliance programs that stand up to audits.
ArgentinaWhat I'm looking for
I've built and maintained privacy, security, and compliance programs for Hibbett Sports, Onapsis, Accenture, VMetrix, Bitso, and Media.Monks. My work spans DSAR operations, GDPR and CCPA requirements, security assessments, contract reviews, risk management, and audit readiness.
At VMetrix, I designed the ISMS and overall information security strategy from the ground up, then led the ISO 27001 certification process through internal and external audits. I also delivered company-wide compliance training to strengthen security awareness.
At Hibbett Sports, I manage OneTrust-based DSAR processes, data mapping, privacy training, security awareness campaigns, CAB documentation, vulnerability-management SLA follow-up, and access-control reviews. Across Onapsis and Accenture, I've led enterprise security questionnaires, RFPs, RFIs, customer assessments, and cross-functional responses with Legal, Privacy, Engineering, and IT teams.
I'm an ISO 27001 Lead Auditor and CompTIA Security+ certified professional who brings 13+ years of experience in GRC, privacy compliance, third-party risk, and security delivery.
Experience
Work history, roles, and key accomplishments
Privacy, Compliance & Security Analyst
Hibbett Sports
Feb 2024 - Present (2 years 6 months)
Manage end-to-end DSAR process using OneTrust, ensuring GDPR and CCPA compliance. Coordinate data mapping, support privacy program maturity, and deliver training.
Managed customer security assessments including SIG and custom questionnaires. Coordinated with SMEs, maintained documentation repository, and supported SOC 1/2 and ISO 27001 audits.
Oversaw risk-based security reviews for contracts over USD 1M, ensuring IS provisions met client and regulatory standards. Managed RFP/questionnaire workstreams globally.
Governance, Risk & Compliance Lead
VMetrix
Feb 2023 - Oct 2023 (8 months)
Designed and implemented ISMS and information security strategy from scratch. Led ISO 27001 certification end-to-end and delivered compliance training.
Ensured regulatory compliance with BCRA and local data protection laws. Developed IS policies and coordinated with financial authorities.
Built TPRM program from inception, completed security assessments, and developed security awareness program. Assisted with contract reviews and data protection.
Primary contact for RFP/RFI responses on information security. Completed SIG and custom questionnaires, reviewed IS policies, and maintained response database.
Progressed through three roles over 5 years, building cross-functional collaboration and reporting skills. Delivered SLA reports and managed a team of 4.
Education
Degrees, certifications, and relevant coursework
Universidad del Museo Social Argentino
Literary and Scientific Translator, Translation
2011 - 2013
Pursued a degree in Literary and Scientific Translation, developing strong language and analytical skills.
Availability
Location
ArgentinaAuthorized to work in
Job categories
Skills
Interested in hiring Zulema?
You can contact Zulema and 90k+ other talented remote workers on Himalayas.
Message ZulemaGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
