Jorge Velez

Coordinate and direct the participation of the work team in the different projects, both internal and corporate (AVAL). In the same way, carry out the planning and management of the demand to make available the participation of the resources in the projects of Information Security - Cybersecurity. - Act as Navigator / PO in the corporate cybersecurity cell (AVAL) - Evaluation of initiatives / projects around information security - cybersecurity - Constant support to different internal business areas for the definition of information security guidelines

- Definition / implementation of Security Management Systems of the Information - Definition / implementation of information security strategies - Review, conceptualization of AS IS and TO BE in business controls for RPA (Robotic Process Automation) implementations - Ecopetrol - Definition / Implementation of campaigns of culturization in Information Security

- Definition of the Information Security Model - Definition of information and information security guidelines for the organization and its companies - Definition of the Inventory of information assets - Definition of information security risks associated with information processes and assets - Accompaniment and definition of role profiling standards in Cloud services - Azure - Definition of security guidelines regarding technological architecture oriented to outsourced services - Creation of culture through awareness campaigns, talks, courses - Design, implementation of GAP Analysis to determine the level of maturity in Information Security based on the controls of ISO 27001 - Definition and monitoring of action plans according to results obtained from the GAP Analysis - Management and negotiation with suppliers - Definition and monitoring of indicators of computer security platforms, such as WAF, end-point technologies, similar - Definition and monitoring of incident response plan - CSIRP - Definition, implementation of strategies to classify the information of the organization - Definition of SOA policies, guidelines for mobile applications, secure development - Definition of security architecture

-Generation of guidelines regarding the management of information in the organization -Lead project update biometric identification platform -Accompaniment and advice on issues of information security to projects and corporate requirements

Definition of the security architecture of the information in the processes / products / services implemented in the organization. -Trainings / talks / forums to business and internal clients -Accompaniment and conceptualization of projects, services and procedures with the different areas of the organization -Leader of projects on implementation of platforms for the assurance of information in the different business processes of the organization. -Leader in updating the Biometric Identification process -Member of the corporate team for the implementation of the Robotics project - process automation -Working team member to review SWIFT controls in the organization

- Accompaniment to the different business areas in the entity for the assurance of information in various projects and / or business requirements - Information Security Model Update - Definition and implementation of the organization's security procedures

- Portal support www.cali.gov.co - Project analyst - Supervision of IT projects in the different dependencies of the municipality

Project management skills based on the PMI methodology