Suggestions
Miguel González
IT Auditor, Governance Risk and Compliance, IT Risk Management, CISA, ITIL, ISO 27032 Lead Cybersecurity Manager, MIT.
Professional Background
Miguel González is a seasoned IT professional with over 20 years of diverse experience in information technology and auditing. With a robust background in IT audits, Miguel has dedicated 10 years to assessing the adequacy and effectiveness of IT controls within various business processes across different organizations. His expertise covers a broad spectrum of IT risk, security, and compliance, highlighting his commitment to maintaining industry standards and enhancing organizational operations.
In the realm of Governance Risk and Compliance (GRC), Miguel has accumulated six years of rich experience, focusing on the nuances of AC 5.1, 5.2, and 5.3, along with a strong emphasis on the prevention of Segregation of Duties in SAP and Oracle applications. His knowledge extends to Security Process Management (SPM) and FireFighter (FF), which underscores his proficiency in managing IT risk and ensuring compliance.
Throughout his career, Miguel has played a pivotal role in key projects, notably an upgrade project from AC 5.2 to AC 5.3, as well as an implementation project for AC 10.01 V. His familiarity with the entire suite—including Access Management Risk (AMR), Enterprise Access Management (EAM), Business Role Management (BRM), and Process Management Unit (PMU)—positions him as a leading authority in his field.
Education and Achievements
Miguel González’s academic credentials are a testament to his dedication to continuous learning and professional development. He holds a Master’s degree in Information Systems, specializing in IT Management Processes from the esteemed Universidad Autónoma de Nuevo León. Additionally, he has pursued a Business Program at Western Town College in Vancouver, Canada, which focused on English as a Second Language (ESL) and business concepts.
His commitment extends beyond traditional learning; Miguel is an active participant as an article reviewer for the ISACA Journal, contributing his insights on IT Risk Management topics. His involvement in the Information Technology Assurance Framework (ITAF) 4th edition Task Force showcases his leadership qualities and dedication to advancing the field of information technology auditing.
Miguel is also a vital member of the CyberSecurity Committee at ITESM, reflecting his strong interest and expertise in cybersecurity and its implications for IT governance.
Work Experience
Miguel's professional journey is marked by his involvement in several prestigious organizations, each contributing to his extensive knowledge and experience in the field:
- At Atos, he serves in the Audit and Compliance department, where he utilizes his comprehensive IT audit skills to ensure regulatory compliance and risk management.
- Previously, he held significant roles such as IT Internal Auditor at Tecnológico de Monterrey, providing essential insights into the university's IT governance strategies.
- His role as a Regional Coordinator for IT Risk Management, Security & Compliance at HEINEKEN MÉXICO allowed him to spearhead initiatives that bolstered the company’s compliance frameworks while addressing IT risks effectively.
- Within HEINEKEN MÉXICO, Miguel also served as the Coordinator and Analyst in Governance Risk and Compliance (GRC), implementing strategies to improve organizational resilience against information risks.
- Before joining HEINEKEN, Miguel honed his skills at FEMSA, where he worked as an Analyst in GRC.
- His earlier roles included positions as a Post-sale Engineer and Technology Assessor at Estratel and IT Senior Auditor at Treviño y Asociados (with alliances with Intellity and Protiviti). He began his illustrious career as an IT Associate Auditor at Deloitte & Touche, followed by a stint as IT Senior Auditor at PricewaterhouseCoopers, where he further developed his auditing skills.
- Additionally, he contributed to the development and design of websites during his tenure at HEINEKEN MÉXICO, which enriched his technical capabilities in the field of IT.
Notable Achievements and Specialties
Miguel is well-versed in numerous IT auditing and compliance frameworks, enhancing his ability to address complex compliance challenges. His specialties include:
- IT Auditing
- SAP BO GRC Access Control 5.3 (including RAR, CUP, ERM, SPM, Risk Terminator)
- AC 10.01 (including AMR, EAM)
- Proficient in various IT Audit Tools such as ACL, IDEA, Sekcheck, and DumpSec
- Familiarity with SOX and COSO Internal Control Models regulations
- Expertise in CobIT and SAP controls (configured procedures and inherent)
- Knowledge of SQL 2008 DB, Aris, and LiveCompare
Miguel González continues to contribute meaningfully to the fields of IT auditing, risk management, and compliance, driven by a passion for technology and a deep commitment to organizational security. His wealth of experience and ongoing engagement in professional communities showcases his desire to share knowledge while continuously striving for excellence in his career.
