Santiago BARAHONA

En résumé

Entreprises

• BNP Paribas Investment Partners - Head Information Security Risk Manager

  Paris 2011 - maintenant As Head of Information Security Risk Management is my main mission to protect the assets of the organisation according to their business value with an approach based on risk management.
  
  With this approach we can drive our efforts and protect key assets and avoid the overprotection of assets of lower importance, thus maximising security investments.
  
  Strong knowledge of international safety standards such as ISO / IEC 21827, 27001, 27002, 27003, 27004 and 27005. With an experience of aligning security to business objectives: risk management (analysis, evaluation and treatment of risks), strategic planning of information systems security, security policy definition and response to incidents of information security.

• Natixis CIB - Head Information Security Risk Manager

  Paris 2009 - 2011 Protect the organisation's information assets according to their business value and ensure that business can operate – all of this with optimised budgets. For this I use a top - down approach to information security that goes from the apprehension of business requirements, risk management, communication, engagement of resources, arbitrages, and the implementation of action plans.
  
  Experience in strategic planning; security policies; communication and user awareness; assessment of business requirements; risk analysis; definition of security architectures, processes, procedures and security incident response.
  
  Corporate and Investment Bank
  International environment (English – French – Spanish)
  Information security risk management
  ISO 27001, 27004, 27005
  IT Security, Policies, Organisation, Coordination
  BCP.

• IXIS CIB, Natixis CIB - Information Security consultant

  2007 - 2009

• Interpol - IT Security Officer

  2006 - 2007

• AT&T - Information Security Consultant

  Courbevoie 2003 - 2005

Formations

• Kungliga Tekniska Högskolan (Institut Royal De Technologie) (Stockholm)

  Stockholm 2005 - 2007 Master en sécurité des systèmes d’information et de communication
  
  Master en sécurité des systèmes d’information et de communication

• ITESM (Tec De Monterrey) (Monterrey)

  Monterrey 1998 - 2003 Ingénieur en systèmes électroniques