Experience

• 

  Ingenieros pedro posada

  Jul 2011 - Mar 2012

  Quality and occupational health engineer

  To ensure the technical and administrative quality of the works, as well as compliance with applicable legislation regarding occupational health and industrial safety for the project 'construction of works for defense and protection against erosion caused by the Guaviare River in Barrancominas, Guainía department.

• 

  Iov y cia sas

  Jun 2012 - Jul 2013

  Integrated management system coordinator

  I integrated the quality management, occupational health, and environmental management systems, achieving a reduction in the administrative burden of managing the systems

• 

  Master bunker & asociados ltda

  Jul 2013 - Jan 2014

  Integrated management system coordinator

  Manage the management systems in such a way that customer requirements are met, minimize the occurrence of accidents and occupational illnesses, and control environmental aspects and impacts.

• 

  Surtigas

  Feb 2014 - Apr 2015

  Compliance auditor

  Review and verify the risks and controls associated with operational and compliance processes, in accordance with procedures, standards, and policies provided by the company and regulatory authorities. Provide necessary information to enhance audited processes and minimize the impact of risks on business operations.

• 

  Grupo integral de salud falab

  Jan 2016 - Feb 2017

  Integral management leader

  As the manager of management systems, I led the certification processes for ISO 9001, OSHAS 18001, and ISO 14001.I designed and implemented the institution's risk management methodologies.I was responsible for leading the service accreditation processes.

• 

  Expreso brasilia s.a

  Mar 2017 - Oct 2019

  Compliance officer

  -I implemented the SIPLAFT system (Anti-Money Laundering and Terrorist Financing System for Land Cargo Transportation), which includes risk analysis, policy establishment, reporting to the board of directors, due diligence processes, regulatory reporting, and training plans.-I designed the methodologies used for the company's risk management.-I designed the SARLAFT (Anti-Money Laundering and Terrorist Financing System for National Postal Transfers).

• 

  Sophos solutions

  Oct 2019 - Jun 2023

  Risk leader & compliance officer

  I led the implementation project of the ISO 37001 Anti-Bribery Management System in the 5 LATAM subsidiaries. We obtained the certificate without finding any non-conformities, making us the first company in the IT sector to achieve this in Colombia.As the Compliance Officer for SAGRILAFT, PTEE, and Personal Data, I led the identification of compliance risks, the design of policies, controls, methodologies, mechanisms for confidential reporting, reporting to the board of directors, and regulatory bodies.I designed policies and methodologies for the company's comprehensive risk management, including operational risks, information security, business continuity, AML (Anti-Money Laundering), and ABAC (Anti-Bribery and Corruption). Show less

• 

  Tecnológico de monterrey

  May 2023 - now

  Risk, personal data, and cyber risk professor

  Professor of the Diploma in International Corporate Ethics and Compliance. Module: Risk Management; Personal Data Protection, and Technological Risk.

• 

  Hospital universidad del norte

  Aug 2023 - Feb 2024

  Deputy risk director

  Designed the comprehensive risk management methodology, enabling the effective integration of AML, operational, information security, and health risks management.I led the update of the SARLAFT, SICOF and PTEE Systems, aligning them with the internal and external context of the hospital, resulting in a more appropriate and effective risk management approach.

• 

  Ice - integral compliance experts sas

  Mar 2024 - now

  Risk & compliance manager
• 

  Cipherbit-grupo oesía

  Oct 2024 - now

  Compliance consultant