Leandro - Security Compliance Specialist – Enterprise Technology & Information Security

Demonstrated experience with ISO 27001.

Demonstrated experience with GRC.

Demonstrated experience with Incident Response.

Demonstrated experience with IAM.

Demonstrated experience with Data Analysis.

Executed security compliance program activities aligned with ISO 27001 policies, standards, and procedures to assess and improve compliance posture.. Managed the end-to-end lifecycle of security findings: documentation, remediation tracking, closure validation, and exception handling to reduce organizational risk.. Reported on compliance metrics and security trends using Power BI dashboards, providing data-driven insights to leadership and stakeholders.. Performed data analysis across GRC repositories to identify root causes, notable risks, and recurring security deficiencies.. Supported integration of new ISO 27001:2022 controls and control standards into the GRC platform (CofC mapping project).. Participated in migration project updating Authoritative Sources from ISO 27001:2013 to ISO 27001:2022 in the GRC system.. Maintained policy documentation in the GRC platform to reflect the latest published standards, ensuring alignment of all documented findings.. Acted as liaison between technical and non-technical teams across the organization to drive compliance initiatives forward.. Collaborated with InfoSec Consulting on technical remediation efforts: vaulted accounts, software lifecycle management, Azure sprint tracking, and review of third-party penetration test reports.. Facilitated weekly remediation group calls to address emerging threats and vulnerabilities.. Contributed to AI Chatbot digital transformation initiative for enhanced internal employee support.. Operated in a global environment, supporting stakeholders across the US, LATAM, Europe, and Asia.

Managed firewall rule additions and removals using Checkpoint R77 & R80.. Administered Bluecoat Proxy for web traffic security controls.. Provided Level 3 Incident Response, triaging and resolving critical security events.. Ensured ITIL framework compliance across all change and incident management activities.. Planned and implemented change requests; conducted troubleshooting sessions with global teams.. Utilized Splunk (SIEM) for log analysis and security event monitoring.

Provided escalation support for Skype for Business issues for global users.. Administered and troubleshot via Lync Control Panel and OIM.. Managed service requests and incidents through ServiceNow.. Performed Call Admission Control updates using Bluecat IP Admin.. Coordinated with Americas/EMEIA L2 application teams and AT&T; for resolution.

Administered Cisco Call Manager v8.6.2 and deployed Cisco IP Phones (79xx series), Polycom, and Cisco IP Communicator v8.1.4 across the SASA region.. Managed Cisco Unity v8.6.2 and Railtone (Asterisk) for voicemail administration.. Served as Technical Reviewer for the Americas region.. Built and maintained the Telephony L2 Wiki in Microsoft SharePoint; consolidated documentation for a global telephony team in India.. Developed and delivered an English teaching program to improve communications between local and global team members.

Administered WiMAX network infrastructure; analyzed alarms and performed remote troubleshooting alongside wireless engineers.. Dispatched field technicians and managed site access requests.. Generated performance reports and operational queries.

Provided 1st and 2nd level IT support; administered Cisco switches, Microsoft servers (Windows Server 2003/2008R2, Exchange, File/Print/WSUS), VMware ESX 5.5, and Cisco Call Manager Express 3.5.. Managed Symantec Endpoint Protection 11 for endpoint security.

Performed database administration (SQL Management Studio), server administration (Windows 2003/2008), Active Directory management, and internal user support.. Administered Trixbox (Asterisk-based PBX), Microsoft SharePoint, and CRM ticketing system.

Resolved critical VoIP and IP endpoint issues (PBXs, firmware upgrades, licensing, hardware, Linux) for enterprise clients.. Coordinated with Project Managers, Business Partners, and field technicians for customer satisfaction.. Gained expertise in SIP, H.323, and Avaya Communication Manager.

Monitored optical transmission network (SDH/DWDM); managed alarms, case handling, and remote troubleshooting.. Operated hardware: OPTera Metro 4200, Optical Long Haul 1600, OME BB 6500.

Provide over-the-phone interpretation services for clients across the United States, primarily supporting medical calls, with additional coverage in finance and government sectors.. Deliver accurate, real-time English-Spanish interpretation in high-pressure, confidential settings, maintaining strict standards of accuracy, neutrality, and professionalism.

Progressed through Telephony Support L2, NOC Engineer, Infrastructure Engineer, IT Analyst, Backbone Engineer, and NOC Administrator roles, building a foundation in enterprise voice/video systems (Cisco Call Manager, Avaya), Windows/Linux server administration, VoIP (SIP/H.323), and optical transmission networks (SDH/DWDM).