Alex Cedillos

Background

About Alex Cedillos

I am a DLP Security Administrator at Republic Services, a leading provider of environmental services in the US. With over four years of experience in information technology auditing, consulting, and cybersecurity governance, risk, and compliance (GRC), I have developed strong expertise in data security, policy development, and controls evaluation.In my current role, I lead data loss prevention (DLP) initiatives, enhance cybersecurity awareness, and ensure adherence to the organization's Cybersecurity Policy and Data Protection Standard. I have established and managed the implementation of Endpoint DLP tools, creating customized rules and policies within Netskope Endpoint DLP for device and content control, significantly enhancing our security posture across the enterprise. I collaborate with data owners and custodians to secure data, balancing confidentiality, integrity, and availability with productivity needs. My program management skills have been pivotal in rolling out these technologies, ensuring they align with our strategic goals without disrupting user productivity. I also spearhead operational processes and training programs to promote best practices in data security across the organization.In my previous roles, I conducted ITGC audits, performed data privacy reviews, and assessed business continuity management programs for various clients. I have managed Identity Access Management systems to ensure robust access control and regular reviews, and I have led Vulnerability Management efforts to identify and remediate potential security threats. My experience extends to conducting security risk assessments and managing cyber risks by identifying issues, policy violations, and exceptions, thereby enhancing compliance and security frameworks. I hold a CISA certification (expired) and a Bachelor of Science in Computer Information Systems Management. My skills include analytical skills, program management, attention to detail, and creative problem solving. I am passionate about data security and driven by the mission to protect the organization's data assets and reputation.