Oliver Villacorta

About Oliver Villacorta

I operate at the intersection of cybersecurity, enterprise risk, and capital strategy. I help boards, executives, and private equity sponsors make high-stakes security decisions during growth, transformation, and transactions, where cyber risk directly impacts valuation, insurance, diligence outcomes, and long-term resilience. Over more than 13 years, I have led enterprise security assessments, certification programs, and M&A cyber diligence efforts across SaaS, HealthTech, Financial Services, and other regulated industries, supporting organizations ranging from $20M growth-stage firms to enterprises exceeding $1B in revenue. At Smith + Howard, I built and now lead the Cyber Risk Management & Compliance practice and oversee our ISO 27001 certification body operations. My role extends beyond advisory work. I design and operationalize security governance structures that withstand regulatory scrutiny, investor diligence, and board-level accountability. My focus is executive clarity under complexity:• Translating technical exposure into financial and operational risk• Aligning security investment with enterprise strategy• Supporting pre- and post-acquisition cyber integration• Structuring governance aligned to ISO 27001, ISO 42001, NIST CSF 2.0, NIST 800-171, HIPAA, and emerging AI risk standards I work best in environments where security is treated as a value protection and growth enablement function rather than a cost center. My long-term focus is building resilient, transaction-ready security programs that protect enterprise value and accelerate responsible growth. Outside of my professional work, I serve as President of the Amazon King Educational Center, a nonprofit focused on education and community development in Peru.

Experience

1. Senior Manager, Cyber Risk Management Compliance

   Smith + Howard

   Dec 2021 — Present · Atlanta, GA, US

   Lidera la práctica de Gestión y Cumplimiento de Riesgos Cibernéticos (CRMC) de Smith + Howard, ayudando a las organizaciones a transformar la ciberseguridad en una ventaja competitiva mediante la reducción de riesgos, el cumplimiento normativo y el fortalecimiento de la confianza de sus grupos de interés.Asesora a clientes de los sectores financiero, salud, SaaS y manufactura en el desarrollo de programas escalables y listos para auditoría, alineados con ISO 27001, SOC 2, NIST CSF 2.0 y HIPAA. Lideró la acreditación ante la ANSI National Accreditation Board (ANAB), estableciendo a Smith + Howard como un Organismo de Certificación ISO 27001 reconocido, ampliando así la presencia de la firma en industrias reguladas.Realiza evaluaciones independientes de seguridad y gestión de riesgos que brindan a los ejecutivos y juntas directivas visibilidad sobre vulnerabilidades, efectividad de controles y retorno de la inversión en ciberseguridad. Desarrolla recomendaciones pragmáticas y alineadas al negocio que fortalecen la resiliencia y aceleran la preparación para certificaciones.Apoya a fondos de capital privado y empresas de portafolio en procesos de due diligence cibernético previo a adquisiciones y en la planificación de remediación posterior al cierre, protegiendo el valor de las transacciones y mejorando el éxito de la integración.Introdujo los servicios de Gobernanza de IA y CISO Fraccional, aprovechando los marcos ISO 42001 y NIST AI RMF para ayudar a las organizaciones a adoptar la inteligencia artificial de manera responsable y cumplir con las nuevas exigencias normativas.Publica el boletín \"Strategic Cyber Insights\" y participa como ponente en eventos del sector, traduciendo temas complejos de seguridad y cumplimiento en orientaciones empresariales prácticas. Reconocido por conectar las prioridades ejecutivas con la estrategia de ciberseguridad y generar impacto medible en los clientes.

Education

• University of North Georgia - Mike Cottrell College of Business

  Associate of Science - AS, Computer Science

• Kennesaw State University - Michael J. Coles College of Business

  Bachelor’s Degree, Management Information Systems, Information Security and Assurance

• Georgia State University - J. Mack Robinson College of Business

  Master of Business Administration - MBA, Management Information Systems and Services

Skills

• Strength & Conditioning
• Cold Calling
• Sonicwall
• Computer Information Systems
• Linux
• Asp.net
• IT Security Policies & Procedures
• Leadership
• Information Security Management
• Customer Service
• Business Relationship Management
• Public Speaking
• Social Media Marketing
• Critical Thinking
• Computer Hardware Troubleshooting
• U.s. Health Insurance Portability and Accountability Act (Hipaa)
• Bilingual Communications
• Client Relationships Strengthening
• Networking
• Active Directory
• Information Security
• Information Technology
• Medical Information Systems
• Google Analytics
• Sales
• Healthcare Information Technology (Hit)
• Management Information Systems (Mis)
• IT
• Social Media
• Management