Charles Velarde

About Charles Velarde

Information security professional with over four years of experience leading and…

Experience

1. Consultant, Assessment Services

   Coalfire

   Jul 2024 — Present · US

   Evaluated the design and operating effectiveness of controls related to system security, availability, confidentiality, processing integrity, and/or privacy for System and Organization Controls (SOC) 2 engagements with a variety of Software-as-a-Service (SaaS) cloud service providers within the IT and Healthcare industries• Conducted control process walkthroughs, system observations, and control process interviews with client stakeholders to assess the design and implementation of controls within their cloud-hosted environments (AWS, Azure, and GCP)• Analyzed user authentication processes (single sign-on, multi-factor authentication, password configurations, system identity federation, etc.) and user access controls (access provisioning/de-provisioning, privileged access management, user access reviews, etc.) to relevant system infrastructure, operating systems, applications, and data stores within client’s cloud-hosted environments• Assessed the implementation of network security controls (firewalls, security groups, WAFs, IDS/IPS tools, SIEM, VPN, etc.) and use of secure networking protocols (HTTPS, SSL/TLS, SFTP, etc.) within client’s cloud-hosted environments• Communicated compliance requirements, identified control deficiencies, and control process improvements to client stakeholders to help improve their compliance with the SOC 2 framework

Education

• South Lakes High School

  Advanced Diploma

  2013 — 2017

• Virginia Tech

  Bachelor's Degree

  2017 — 2021