Paolo Marquez

Details

Skills

Accounting, Analytical Skills, Bookkeeping, Business Process Improvement, Business Strategy, California Consumer Privacy Act (CCPA), Communication, Data Analysis, Event Marketing Strategy, Event Planning, FedRAMP, Finance, Financial Accounting, Financial Services, Forecasting, General Data Protection Regulation (GDPR), Information Security, Internal Audit, Internal Controls, ISO Standards, IT Audit, ITGC, Macroeconomics, Management, Management Consulting, Microsoft Excel, Microsoft Office, Microsoft Word, NIST, Options, Payment Card Industry Data Security Standard (PCI DSS), Policy Analysis, PowerPoint, Project Management, Quality Assurance, QuickBooks, Reporting & Analysis, Risk Assessment, Security, Small Business, SOC 1, SOC 2, SSAE 16, Start-ups, Stocks, Strategic Planning, Strategy, Tax Preparation, Trend Following, U.S. Health Insurance Portability and Accountability Act (HIPAA)

About

Served as a management consultant, auditor, and risk compliance specialist for a variety of clients in different industries within the past ten years while leveraging a combined background in Information Technology/Information Systems, Accounting, and Finance with strong consulting and project management skills.



Paolo's strengths and expertise lie in strategic planning and assessment in order to align cyber security with business goals leading to the deployment of key technologies that allow the business and its employees to be more innovative, productive, and profitable. The breadth and depth of Paolo's experience includes, but is not limited to:

• Understanding complex information security environments to ascertain for gaps and opportunities for improvement in security designs based on industry best practices;

• Translating governance, risk, and compliance requirements into real-world application, and advising on large complex operations;

• Serving as a trusted advisor to senior management and C-Suite executives by providing demonstrated knowledge on risk methodologies, approaches to measuring effectiveness, security technologies as well as multiple compliance and regulatory standards; and

• Designing a risk-based environment with security as an enabler.



Experience: Aptible | Becker | Cisco | City College of San Francisco | Deloitte and Touché | Grant Thornton | Hilliard Management Group | MUFG Union Bank | NetApp | Rivian Automotive | RSM / McGladrey | The Cadence Group / Moss Adams | Verizon Media Group / Yahoo



Specialties: SOC 1, SOC 2, SOC 3, NIST 800-53, NIST 800-171, NIST 800-30, NIST 800-37, FedRAMP, IT SOX, ISO 27001, ISO 27017, ISO 27018, CSA STAR, HIPAA, HITRUST, GDPR, CCPA, and COBIT.