Rosina Marmion Arago

• Established and matured the company's first dedicated security department from the ground up, defining its strategy, roles, tools, and processes. • Successfully led annual PCI DSS certification audits, ensuring continuous compliance and strengthening the organization's security posture. • Translated complex, high-stakes regulatory requirements into a streamlined roadmap of technical security controls. • Led security integration efforts during mergers and acquisitions, ensuring seamless alignment with corporate security standards. • Promoted a culture of security awareness and drove continuous improvement across the organization. • Managed security operations, compliance (PCI DSS,GDPR), application security, information security management and cloud security (Azure). • Integrated AI-driven security tools to enhance threat detection, automate incident response, and improve overall operational efficiency. • Established a comprehensive third-party risk management program to assess and mitigate security risks posed by vendors and partners.

• Worked with various customers in the Payments and Retails industry as customer’s CISO counterpart and as a second opinion cybersecurity advisor. • Developed and executed security posture remediation plans, proactively addressing vulnerabilities and enhancing overall security. • Provided strategic guidance on application security (OWASP) , on-prem and cloud security, protecting critical assets and data from cyber threats. • Managed a cross-functional geographically distributed security team • Oversee vulnerability management and penetration testing programs, prioritizing and tracking remediation efforts to proactively strengthen the security posture. • Lead the evaluation, selection, and implementation of new security technologies, such as firewalls, endpoint protection, and SIEM tools, to enhance threat detection and response capabilities. • Led annual programs to maintain PCI DSS and ISO 27001 compliance, while also ensuring adherence to local privacy laws and Central Bank regulations, to mitigate legal and financial risks • Directed the development and enforcement of security policies, standards, and procedures to maintain a consistent security posture across all business units.

• Built and managed production support teams that ensured seamless and secure 24/7 operations, improving service availability and reliability. • Optimized key processes and implemented ITIL-aligned service management strategies, resulting in more efficient and effective support delivery. • Managed SLAs to consistently meet performance targets across geographically diverse teams. • Enhanced overall operational integrity by integrating information security best practices into daily support functions.

•Successfully led the implementation of a new Electronic Health Record (EHR) system across a major hospital chain with 10+ facilities, integrating patient data, billing, and clinical workflows to centralize information. •Engineered a phased rollout strategy that minimized operational disruption, resulting in a seamless transition and zero impact on patient care delivery during go-live. •Executed a comprehensive training and change management program for over 500 clinical and administrative staff. •Reduced manual data entry and improved data accuracy by digitizing patient records, enhancing clinical decision-making and operational efficiency. •Ensured the new EHR system achieved compliance with local privacy regulations, protecting sensitive patient data and mitigating legal and financial risks for the organization. •Represented the organization at healthcare conferences and fairs in Uruguay and the US, building key industry relationships.

• Managed delivery operations for customers in the Payments, Healthcare and Retail domains • Oversaw all aspects of day-to-day operations effectively monitoring timelines, resources, and budgets. • Contributed to pre-sales activities, including proposal preparation and client presentations, which directly supported new business acquisition and growth. • Fostered strong relationships with clients and internal teams through effective communication and collaboration, ensuring a shared understanding and successful project outcomes. • Successfully managed teams of 50+ resources, forecasted project needs, and addressed financial deviations, ensuring projects were delivered within budget and scope. • Proficiently managed project risks, issues, and scope, maintaining clear communication of project status to stakeholders at all levels, including executive steering committees. • Facilitated workshops and analysis sessions with diverse stakeholders to translate complex requirements into actionable tasks for remote teams based in Chile, Mexico and US. • Presented on business process excellence at industry events, establishing expertise and contributing to thought leadership. • Led comprehensive audits across various project types (development, maintenance, production support, BPO), ensuring strict compliance with established quality and security frameworks such as BS7799-2, ISO 9001, CMMi, and Six Sigma.