Parcourir les catégories
Explorer
Fiverr Pro
Français
$
USD
Andres Huerta
@ahlconsulting
Governance, Risk, Compliance and Assurance Consultant
Mexique
Anglais, Espagnol
À propos de moi
Governance, risk, compliance and assurance professional with 16+ years of experience across global banking and healthcare organisations. I help businesses translate complex regulatory and security requirements into practical controls, policies, risk assessments, compliance mappings and audit-ready evidence. My experience includes ISO 27001, NIST, SOC 2, SOX, GDPR, IT controls, internal audit and regulatory compliance. You will receive clear, structured and business-focused deliverables tailored to your organisation.
Compétences
Andres Huerta
hors ligne •
Temps de réponse moyen de 6 heures
Voir mes services
Certifications et réglementations
I will map iso 27001, nist csf and soc 2 requirements to controls and evidence
Portfolio
Expérience professionnelle
Manager, Security Assessment & Risk Management - Audit
Alconost • Temps plein
Mar 2025 - Aug 2026 • 1 yr 5 mos
Led global security assessment, regulatory mapping and control assurance work across technology and information security. Assessed and enhanced 180+ controls and contributed to rationalising the enterprise control baseline from approximately 340 to 204. Coordinated workstreams with 12 Director-level control owners and supported ISO 27001, SOC 2 and ENS readiness. Developed regulatory traceability, evidence expectations and a proposed Second Line assurance methodology aligned with NIST and ISO.
HSBC
Temps plein • 4 yrs
Regional LAM Reputational Risk, Regulatory Compliance, Financial Crime Investigations & IT Control Audit Senior Manager
Feb 2022 - Jun 2023 • 1 yr 4 mos
• Led a regional organisation of approximately 45 professionals across Mexico, the United States, Canada, Chile, Argentina and Brazil, with six Senior Managers as direct reports. Participated in the Risk Committee, presented regional results to senior stakeholders across Latin America, the UK, Hong Kong and India, and provided analysis supporting executive and Board-level risk reporting. • Redefined the regional Reputational Risk governance framework and led risk-based thematic reviews across major banking businesses. Developed KPI/KRI reporting and assessed potential reputational exposure arising from Regulatory Compliance, Financial Crime, internal fraud, customer complaints, adverse media, technology incidents and cybersecurity events, determining escalation and management action. • Directed regional Regulatory Compliance and Financial Crime Second Line assurance reviews, reviewing and approving assessment conclusions, challenging control effectiveness and representing the function with senior business and risk leadership. • Led regional IT Control Audit activities using risk-based methodologies aligned with ISO 27001, NIST CSF, COBIT and CIS Controls, assessing information security and technology control effectiveness, establishing remediation actions and performing follow-up reviews through closure.
Regional Global Trade & Receivables Finance Chief Control Officer, Quality Assurance & Policy Governance Manager
Jun 2019 - Feb 2022 • 2 yrs 8 mos
• Led the regional First Line control environment for Global Trade & Receivables Finance, managing five Managers across Mexico, Chile, Brazil and Argentina and designing risk-based indicators and monitoring criteria to assess control performance and trigger targeted reviews. • Adapted the existing SOX control framework to Global Trade & Receivables Finance operations, coordinated regional implementation and performed ongoing SOX control testing to assess operating effectiveness and support remediation. • Owned end-to-end Policy Governance, analysing Group policies, assessing regional applicability, translating requirements into business and control expectations, coordinating implementation and communication, overseeing mandatory training and monitoring adherence. • Held accountability for weekly Quality Assurance sampling of approximately 80 Trade Finance and Receivables Finance transactions, overseeing and personally performing selected reviews of financial crime red flags, alert disposition and vessel screening, with positive alerts escalated to specialised Financial Crime teams.
