Ricardo Vargas

As Cybersecurity Manager I was in charge of Security Department IT according with the standards, policies and process of the IT Direction, my main responsibilities were: ● Redesigned and prepare the new Incident Response Plan and coordinate tabletop exercises ● Defined and Monitoring of KPI´s and security controls of Managed Security Service ● Attend assessment and audits of Security Policies, Process and Procedures ● Review and prepare budget of tecnologies and projects of Secure IT department ● Quality Assurance of Policies & Processes for updated and attend recomendations of Internal Control ● Evaluate and Testing Security Tecnologies for Applications, Infrastructure and Security Operation Center ● Awareness Security Program to schedule traing for all employess with KB4 Platform ● Prepare and coordinate auditing security controls andn security policies, procedures and controls ● Coordinated an small team of Security Engineers and SOC Analysts for Operation and Incidents response, schedules and review theirs roles and responsibilities, asigned tasks and proyects. Functional Experience: Relationship with several levels of Directors and Managers of others areas Tools: Proactivanet, Elastic SIEM, Cisco AMP, Cisco Umbrella, Cisco DUO, Cisco Anyconnect, CSPM ORCA for Cloud Security Monitoring of AWS, Azure & GCP, Qualys Vulnetabiltiy Management, MS Defender for Cloud, MS Intune, MS Sentinel, MS Copilot for Security, FW´s Fortinet & SonicWall, Digicert Certificates, DRUVA for backup´s, JIRA for mananged proyects, etc.

Cybersecurity Management in charge of Security Services for S-LATAM Region according with the methodology, standards, policies and process of the Corporate Global Deloitte Firm from USA, my main responsibilities were: • Leader of Security Strategic Projects defined by High Direction • Coordinated activities and documentation to achieve the complaint of SGSI/SGDP • Monitoring of KPI´s and controls of Managed Security System • Attend assessment annually Global Security Standard • Monitoring compliant and delivery of Global Security Projects • Review and Authorize budget of projects of department • Quality Assurance of Policies & Processes for reduce risks • Design of S-LATAM Plan of Security Testing for SAST/DAST and Penetration Testing of Apps Exposure of Internet and Apps Internals • Quality Assurance of Security Architecture of Applications, Infrastructure and New Technologies

GESTIÓN DE LAS OPERACIONES DEL SOC DE LATAM DE S21SEC, ACCIONES DE PREVENTA, COORDINACIÓN Y LIDERAZGO DE EQUIPOS TÉCNICOS, COLABORACIÓN EN EL DISEÑO DE SERVICIOS, FORMALIZACIÓN DE PROCESOS Y PROCEDIMIENTOS DEL SOC, GESTIÓN DE INCIDENTES DE SEGURIDAD.

Deploy security process and procedures for Security Engineers Follow up of SOC Projects Define schedule´s SOC Engineers for 7x24x365 daily operation Manage several providers of security tecnologies. Manage Security Incident and Problem process of Security department Make KPI´s monthly and weekly of SOC Mentor of CyberTalent Program of SOC

Coordinate activities of the Pre-Sales & NSOC Engineers Make plans of trainings for Pre-Sales & NSOC Engineers Define KPI´s of Pre-Sales & NSOC Engineers Design of probe of concept for security solutions (firewalls, ips´s, AV/AS, etc.) Make Program Plans of Deployment´s of security solutions for Customers. Get Certifications and Trainings of several providers and vendors. Deployment ISO 20 K process to get certification of MSSP

Design of security solutions and proposals for Customers Deployment security solutions for Customers. Responsible for deployment and delivery of security solutions of SOC and Customers Coordination of several providers and vendors.

Design and deploy Information Security Policies Analyse Risk Assessment to Corporate Infrastructure In charge of the Information Security and Plan Strategy Security Review and update Corporate Manual of Security Policies Evaluate Security Technologies Check and test BCP/DRP plans and policies

Report to Director of Information Technology Evaluate the Security Information Solutions and Strategy Security Implement 18 Security Procedures based on ITIL & COBIT into IT Direction (Vulnerability Management, Incident Response Management, Change Management, Security Management and others) Develop Security Policies and update Corporate Manual of Security Policies Investigate and evaluate new security technologies to organization Evaluate Security Risk to Corporate Systems and Services

Evaluate the security requirements of the Direction General of Informatics Propose criteria, strategies and controls necessary to ensure the computing resources of the Ministry of Finance Monitoring and evaluate the processes of access to computer services Participate in the definition of criteria and security strategies in the development and implementation of information systems Propose mechanisms and controls to ensure integrity, confidentiality and availability of information systems Monitoring the integrity and proper functioning of the computer equipment and mission critical services provided Assess and identify vulnerabilities and risks of computing resources of the Direction General for Informatics Participate in comprehensive operational efficiency of systems and procedures to continually improve attributed to the area, keeping updated the security manual of the DG.

Head of department security systems to protect the infrastructure of Bank. Workload allocation, activities and tasks the engineers of systems security area Responsible for managing technological security platforms. Responsible for projects related to security systems that keep infrastructure in good condition.