Juan Antonio O.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

I’m an Information Security Officer with experience in Business Process Outsourcing (BPO) setup, where I help my organization achieve and maintain its key certifications year after year — PCI DSS v4.0, SOC 2, HIPAA, HITRUST (e1), and ISO 27001. My work sits at the heart of Governance, Risk, and Compliance (GRC). I collaborate closely with IT, engineering, and business teams to turn framework requirements into everyday practice — gathering and reviewing audit evidence, identifying and closing control gaps, and drafting the policies, standards, and procedures that keep us continuously audit-ready. Beyond the audit side, I bring hands-on security operations experience. I work within our Security Operations Center (SOC), monitoring our SIEM (Security Information and Event Management) platform, triaging and responding to alerts, and making sure every incident is actioned within our defined SLAs. I also handle third-party and client due diligence — completing security questionnaires and vendor risk assessments accurately and on time. Having sat on both sides of the audit table, I know how much a clear, well-documented, and timely response means to partners going through their own assessments. How I can help: Audit readiness and certification support across PCI DSS v4.0, SOC 2, HIPAA/HITRUST, and ISO 27001 Control implementation, gap analysis, and evidence collection and management Drafting security policies, standards, and procedures SOC / SIEM monitoring, alert triage, and incident response within SLA Security questionnaires and third-party / client due diligence Mapping shared controls across multiple frameworks to cut duplicate effort Whether you’re preparing for a first audit, maintaining existing certifications, or just need an experienced extra pair of hands for evidence gathering and due diligence, I’d be glad to help.