Roberto Flores Gtz

Security Infrastructure Management Security Architecture Network Security IT Security Compliance - SPEI, Circular Única de Bancos, PCI, Banco de Mexico, CNBV, etc Application Security

Governance, Risk and Compliance IT PCI, SOX, NIST, ITIL, Cobit and ISO27001 Security Incident Management Third-party security Review IT Security Projects Operational Resilience

Risk Management Compliance IT infraestructure Operation Control IT Transformation Security Controls Operational Risk

IT infrastructure and application system risk assessment Identity Management Regulatory Compliance Regional Integration Controls

Centralization of control management for all companies of the group. Risk Assessment of IT and business process. Implemenation of IT Security Controls. Development of policies and standards.

Focused on risk evaluation and implementation of controls for the different services of information technology, business and operations. I have developed technology renovation projects, strengthen security controls in the ATMs network and Internet banking. Additionally, I implemented enhancements for identity management and security controls in centralized systems for Latin America.

Duties: •Review of processes, systems, applications and technology acquisitions to ensure compliance with corporate security policies. This assisted the process of global integration in relation to the technological environment. •Implementation of controls in compliance with SOX requirements. •Construction of security controls and regulatory requirements applicable to Banking services. (HSBC Standards; PCI Standard; and Chapter X and CNBV – local regulator - rules) •Implementation of support processes for change, problem and incident management. (ITIL)

Responsible for the planning, execution, and closing of projects related to Information Security: • Identity Management • Systems integration of HSBC Bank Panama • New Credit Cards systems • ATM´s Security Controls • Public Key Infrastructure (PKI) • Corporate eMail • Implementation of the Application Security Process.

Risk assessments for infrastructure and application systems, participating in projects like: • New York Agency processes relocation to Mexico City • Anti Money Laundering systems implementation • Afore Bital Company Inception • Y2K Conversion

• Analysis of financial information. • Businesses processes assessments and improvements. • Risk and performance assessments.

Schedule, conduct and organize audits of full complexity for conformity with policies and procedures of different companies such as Tupperware, Banamex Accival, Michelin, Seagrams México, Sony Music, among others: • Computer Data Centers • BCP and DRP • Application systems controls (including testing) • Check audit reports and work papers created by other auditors. • Carry out special investigations. • Risk Assessment and establishment of internal controls. • BCP and DRP implementation.