Information security
ISO/IEC 27001:2022ISO 19011Análisis de riesgosSGSIPolíticas y controlesGestión de incidentes
Professional profile
Jhors Maicken Giraldo Suárez
Cybersecurity Engineer · Information Security
Cybersecurity Engineer, graduated with Highest Distinction, and a certified ISO/IEC 27001:2022 Internal Auditor. I work in information security inside an ISO 27001-certified logistics and BPO company, and in parallel I administer IT infrastructure for a school network in Chile. That double role — the one who audits and the one who operates — is what makes my recommendations applicable rather than theoretical.
Medellín, Colombia — working with clients in Chile, Spain and the United States
Professional degree
Cybersecurity Engineer
Instituto Profesional AIEP · Universidad Andrés Bello
Approved unanimously with Highest Distinction
Recognised in ColombiaRecognised in Colombia by the Ministry of National Education — Resolution 004817 of March 2025 — as an Information Security Engineer.
Certifications
ISO/IEC 27001:2022 Internal Auditor
Issued by Global Colombia Certificación
ISO 27001ISO 19011SGSI
Secure application development — OWASP
Issued by Rheoli University, Chile
OWASP Top 10ASVSSecure coding
Technical skills
Offensive security
OWASP Top 10Pentesting webAnálisis de vulnerabilidadesCVSS v3.1NucleiMetasploit
Cloud & infrastructure
Google Cloud PlatformAWSLinux / Ubuntu ServerFirewall y VPNIAMGoogle Workspace
Monitoring & detection
Wazuh (SIEM)GrafanaPrometheusNode ExporterOCS InventoryAlertas y respuesta
Development
PHPPythonJavaScriptHTML / CSSWordPress · WooCommerceMySQL
International experience
Projects delivered in four countries
🇨🇴
Colombia
Information security — logistics & BPO
Maintaining and expanding the ISMS at an ISO 27001-certified company: controls, internal auditing, awareness and a SIEM project.
- ISMS internal auditing
- Annex A control implementation
- Wazuh SIEM project
- Security in platform modernisation projects
🇨🇱
Chile
IT infrastructure — school network
Google Cloud server administration, firewall and VPN, IP telephony, asset inventory and WordPress hosting for an education network.
- Google Cloud servers
- Firewall, VPN and segmentation
- Asset inventory with OCS Inventory
- ISMS consulting and implementation
🇺🇸
United States
Enterprise security consulting
Cybersecurity advisory for US companies under confidentiality agreement.
- Security risk analysis
- Policies and protocols
- IT infrastructure audits
- Incident response planning
🇪🇸
Spain
Web security audit
Web audit and pentesting for a Spanish company: full application and server assessment.
- OWASP Top 10 vulnerabilities
- Application security
- Server configuration review
- Hardening recommendations
Client names are withheld under confidentiality agreements. References available on request.
Free assessment
What if the problem is already inside?
The first review is free: 30 minutes, no commitment, and you leave with at least three concrete findings about your operation.
No cost · No commitment · Reply within 24 business hours