About Carlos Rivera

Carlos Rivera is a Principal Advisory Director in the Security & Privacy practice.

Carlos has 30 years of experience in IT and cybersecurity, primarily within the fintech industry. Prior to joining Info-Tech Research Group, Carlos spent 21 years as an information security officer for multi-billion-dollar business units dedicated to money movement in the P2P, B2C, and B2B space. Most recently, throughout his 21-year career with this Fortune 500 fintech, Carlos led global teams of security and network engineers, enterprise architects, risk managers and analysts that provided cybersecurity services to many global financial industry clients, and was responsible for information security governance, cyber risk management, vulnerability management, application security methodology and adoption focusing on shift-left fundamentals such as Static Analysis Security Testing (SAST), Dynamic Analysis Security Testing (DAST), Open Source Security Testing (OSST), and Manual Application Security Testing (MAST).

His expertise covers all aspects of security architecture, cryptography, application security, cyber risk management as well as communication and transmission cybersecurity: SFTP, SSH, SMTP, DNS, DHCP and IPAM (DDI). In addition, Carlos has conducted presentations delivered in various conferences, such as the Nevada IT Symposium focused on fintech cybersecurity and the MITRE facility to present on Threat Intelligence & Management for the Department of Defense (DoD).

Carlos holds numerous security certifications, including Certified Information Systems Security Professional (CISSP), Certified CheckPoint Security Administrator (CCSA), Payment Card Industry Professional (PCIP), Payment Card Industry Internal Security Assessor (PCI ISA), Certified Identity and Access Manager (CIAM), Certified Identity Management Professional (CIMP), Certified Access Management Specialist (CAMS), Certificate of Competence in Zero Trust (CCZT), and was part of the first pilot group to certify on Microsoft Certified Systems Engineer + Internet (MCSE+I) in 1997.

My Company