Information Security Risk Management

Lisa Morales

+1-479-***-**** ****.********@*****.*** 72701, Arkansas United State

SUMMARY

Industrial Engineer with extensive experience in information security and management system implementation. Specialized in ISO/IEC 27001, including initial implementation and migration to the 2022 version. Experienced in ISO 9001 and ISO 20000 management systems, as well as risk management and personal data protection. Collaborative and results-oriented approach, working across departments to ensure compliance with standards and best practices. SKILL

• Risk assessment • Service level agreement management

• Information security management • Privacy and information systems

• Document management strategies • Team collaboration and commitment EXPERIENCE

Information Security Analist, CCA S.A., April 2021 – June 2025 Santiago, Chile

• Supported the implementation of the Information Security Management System (ISMS), resulting in successful ISO/IEC 27001:2013 certification.

• Upgraded the Information Security Management System from ISO/IEC 27001:2013 to ISO/IEC 27001:2022.

• Managed ISMS documentation, including the identification of roles and responsibilities related to key technological tools and systems.

• Contributed to asset identification and risk assessment processes, ensuring accurate classification and evaluation.

• Verified the effectivenesss of security controls to ensure ISO 27001 compliance and enhance organizational security

IT Goverment Analist, Hites S.A., April 2019 – April 2021

• Coordinated internal and external IT audits, including follow-up and support in the execution of action plans and remediation of identified deficiencies.

• Monitored and reported on SLAs of critical IT service providers to ensure compliance with performance and contractual requirements.

• Developed documentation, procedures, and operational controls aligned with Information Security requirements, supporting IT management objectives and regulatory compliance. EDUCATION

Industrial Engineering

Proccess, University of Santiago of Chile, Chile May 2014 LANGUAGES

Spanish: First Language

English: Upper Intermediate (B2)

WEBSITES, PORTFOLIOS, PROFILES

• https://www.linkedin.com/in/lisa-morales-63b20580/ CERTIFICATIONS

• Certified ISO29100 Lead Implementer – Privacy Framework

• Certified ISO27701 Lead Implementer

• Implementing Privacy as a DPO under the GDPR

Contact this candidate