Quality Assurance Security

Luz Adriana Jaramillo Ospina

********@******.***.***

Objective To obtain a full time job, preferably in the Silicon Valley area, as an information security consultant or

an information systems auditor, analyzing information technology risks and assessing security controls

for information assurance.

Education Carnegie Mellon University, Pittsburgh, PA- Silicon Valley, CA

Master in Information Technology - Information Security, Current GPA: 3.67

Expected Graduation: December 2011

Relevant courses: Fundamental Consulting Skills, Information Security Risk Analysis, Information

Security Risk Policy and Management, Applied Information Assurance, Information Security

EAFIT University, Medellin, Colombia

Information Systems Auditing Specialist degree, 2008, GPA: 4.00

Systems Engineering Bachelor s degree, 2004, GPA: 3.75

Work Intern, Summer 2011

Experience Ernst & Young, New York

FSO Advisory, ITAS, ITGRC

Classified more than 8000 findings according to information security controls for a client in the

insurance sector

Information Security Analyst, August 2009 June 2010

Bancolombia Bank, Medellin, Colombia

Designed and implemented security controls for financial systems based on qualitative risks

analysis

Adjusted and implemented the Security Testing Process for banking software products

Enhanced the Information Security Management System (ISMS) for Bancolombia Group based on

ISO27001 standard

Defined policies and procedures to comply with PCI, Sarbanes-Oxley and regional regulations

IT Methodologies Leader Analyst, May 2006 July 2009

Bancolombia Bank, Medellin, Colombia

Defined 29 IT processes for Bancolombia s IT department based on COBIT framework

Assessed 150 IT process controls based on COBIT control objectives.

Promoted integration of IT Governance, Risks and Compliance initiatives

Defined and implemented the IT Processes Improvement Methodology for Bancolombia Group

based on COBIT maturity models

IT Quality Assurance Analyst, July 2002 April 2006

Bancolombia Bank, Medellin, Colombia

Implemented software quality assurance for transactional banking devices

Designed and executed systematic software testing for more than 150 banking products (new

features / changes)

Certifications Certified Information Systems Auditor (CISA) -Highest certificate test score in Colombia-

Information Systems Audit and Control Association ISACA May 2009 to date

COBIT Foundation Certificate

Information Systems Audit and Control Association ISACA February 2009

Leadership Selected by the Security and Compliance Director of Bancolombia Group as the Leader for the IT

Methodology Team. Planned the work for the IT Methodology Team, monitored and informed results

to the Vice-president of Technology and process owners. Served as coach for 10 people - personal and

professional growth, skills development and advisory

Technical Programming Languages: Experience with Java, HTML, XML, SQL

Skills Operating Systems: MS Windows, Unix

Software: Microsoft Office, Visio

Other: Knowledge of ISeries, PSeries, Stratus, Unisys ClearPath, ACI Base24 platforms

Languages: English, Spanish (native tongue)

Research Research Assistant, January 2002 June 2002 (Internship semester)

Experience Computer Science Department University of Chile

Professor Ricardo Baeza-Yates

Collaborated in Information retrieval and search engine projects

Supported technical issues as the system administrator of Chilean search engine TodoCL

Honors/ Carnegie Mellon University - Information Networking Institute essay contest winner. Recipient of

Awards conference scholarship to attend the Grace Hopper Celebration of Women in Computing, August

2010

Carnegie Mellon University Information Networking Institute Scholarship for Master s degree

Colombian government scholarship Enlaza Mundos for Master s degree, August 2010

Colombian government scholarship Colfuturo for Master s degree, July 2010

Member of undergraduate Thesis Jury for Software Quality and Assurance projects EAFIT

University, 2007-2008

Undergraduate Honored Thesis: Quality assessment plan for software products, based on

international standard ISO/IEC 9126 EAFIT University, December 2003

GEMIS OE Award (Students Organization) EAFIT University, September 2002

Academic Excellence Award OE (Students Organization) EAFIT University, 2001

Memberships Information Systems Audit and Control Association ISACA

Chapter: Bogot Colombia (Bronze level member)

IEEE

Chapter: Colombia

Contact this candidate