Christian Rojas

WORK HISTORY

EDUCATION

ABOUT CHRISTIAN ROJAS

I am a seasoned Information Security Director leveraging a proven 10+ year track record in bridging the critical gap between Governance, Risk, and Compliance (GRC) and technical Security Operations. I specialize in building \"Board-ready\" security programs that drive both regulatory compliance and enterprise resilience. I don’t just write the policies; my background shows I have the technical expertise to ensure they are effectively enforced in hybrid cloud environments.Throughout my career, I focused on translating complex security risks into clear business strategy:• Governance & Trust: I successfully directed organizations through rigorous audit attestations, including SOC 1, SOC 2, SOC 3, ISO 27001, and PCI-DSS, reducing security compliance gaps by up to 50%. I also established an AI governance framework for secure SaaS adoption. • Operational Excellence: I built high-velocity incident response capabilities, implementing EDR/XDR and automating detection workflows that reduced incident response time by 60%. I led real-time triage and containment of internal and external threats using tools like SentinelOne and AWS GuardDuty. • Strategic Alignment: I secured executive buy-in for key initiatives through quarterly briefings to C-suite stakeholders, and overhauled Third-Party Risk Management (TPRM) programs, achieving a 50% cost reduction in vendor services.My foundation in Psychology and leadership experience in the US Marine Corps Reserves informs my disciplined approach to team development and fostering a culture of proactive risk management.Core Competencies: Information Security Strategy | GRC (SOC 2, ISO 27001, GDPR, PCI-DSS)| AI Governance | Cloud Security (AWS, Azure, GCP)| Incident Response | Zero Trust Architecture | Managing Budgets.