Eleonor Pelayo - Nicolas

Experience

• 

  Navarro Amper & Co. | Member of Deloitte Touche Tohmatsu Limited

  May 2014 - Jun 2016

  Associate Consultant

  Deloitte's Enterprise Risk Services Department provides services such as internal audit, information technology audit and technical reviews. Also, they offer advisory services on business continuity management and technology risk management.As an associate, she was involved in the following: - Business process review for a retail and manufacturing company. - Fraud audit for a local insurance company. - Information Technology audit, including SOX audit, for various industries such as manufacturing, retail and financial institution. - Documentation of IT and Asset Management Policies and Procedures, using the ISO 27000 series, for a leading holdings company. Show less

• 

  NavarroAmper&Co./Deloitte Philippines

  Jul 2016 - Aug 2017

  Senior Consultant

  As a Senior Associate, Eleonor was assigned on various engagements listed below: - Information Security Assessment Project, for a local regulatory body, focusing mainly on Asset Management. - Data Leakage Protection (DLP) tool implementation project for a manufacturing company, participating mainly on the functional side and secondary on the project management side. - PCI DSS readiness assessment of a local telecommunication company. She was mainly involved on the functional stream doing current state understanding, readiness assessment and report writing. - ISMS maturity assessment of a local company engaged in various industries such as the energy sector, construction, real estate and agriculture. She was mainly involved from the planning of activities, current state understanding and assessment and report writing. She also conducted a series of Asset Management workshops for this engagement.During 2017, she was awarded the Exceptional Consultant Award and was part of the team who won the Project Award during the annual Risk Advisory gathering. Show less

• 

  Crawford & Company

  Sept 2017 - Oct 2018

  Senior IT Auditor
• 

  Deloitte Southeast Asia Ltd.

  Oct 2018 - Oct 2021

  • Manager

    Jun 2021 - Oct 2021

  • Assistant Manager

    Oct 2018 - Jun 2021
• 

  KPMG Philippines

  Feb 2022 - Jul 2024

  • Senior Manager, Cybersecurity

    Aug 2023 - Jul 2024

  • Manager

    Feb 2022 - Jul 2023
• 

  SM Investments

  Jul 2024 - now

  AVP - Governance, Risk and Compliance for Cybersecurity