Professional Summary
Overview
Work History
Education
Skills
Certification
Personal Information
ADDITIONAL INFORMATION
Timeline

HÉCTOR VÁZQUEZ GONZÁLEZ

Nuga Sys
Monterrey,Nuevo Leon
1
Certification
23
years of professional experience

Senior cybersecurity and technology leader with 25+ years of experience across cybersecurity services, endpoint protection, data loss prevention, security governance, risk management, vendor ecosystems, regulated environments, and enterprise technology operations. More than 20 years of experience leading security infrastructure and managed-service initiatives across Mexico, the United States, and Europe, including environments with 9,000+ endpoints, 500+ servers, and 75,000 cybersecurity licenses annually. Experienced in leading cross-functional technical teams, coordinating enterprise security providers, escalating and communicating risk events to senior stakeholders, maintaining audit readiness, and aligning cybersecurity operations with business, regulatory, privacy, and compliance requirements. Strong background across endpoint security, anti-phishing, encryption, messaging security, DLP, asset management, CMDB, cloud-service governance, PCI-DSS, SOC 2, and financial-crime controls.

Professional IT leader prepared to drive strategic technological initiatives and innovation. Proven track record of enhancing system efficiencies, cybersecurity, and infrastructure management. Strong focus on fostering team collaboration and aligning IT strategies with organizational goals. Adept at adapting to evolving business needs and leveraging technical expertise in areas such as network architecture, software development, and project management.

Work History

DIRECTOR OF IT SERVICES, CYBERSECURITY & RISK

14 Years 2 Months
Nuga Sys | 08.2012 - Current
  • Directed IT strategy aligned technology initiatives with business goals and growth priorities.
  • Lead cybersecurity, technology-services, risk-governance, and vendor-management initiatives for enterprise and government customers across manufacturing, financial services, government/national security, oil and gas, and retail environments.
  • Coordinate security-related issue escalation and response activities with internal teams, technology providers, client stakeholders, and senior leadership, ensuring clear ownership, risk-based communication, remediation tracking, and executive visibility.
  • Manage strategic relationships with 15+ technology providers, including Microsoft, Broadcom/Symantec, Check Point, Cisco, Splunk, and Google, covering endpoint security, EDR, anti-phishing, encryption, DLP, messaging security, asset management, and related cybersecurity services.
  • Managed an 11-year consecutive managed-services engagement for a federal national-security agency covering approximately 75,000 cybersecurity licenses annually, including EDR, endpoint protection, anti-spam, encryption, anti-phishing, and asset-management capabilities.
  • Built and maintained technology-partner governance processes, including due diligence, security-benchmark validation, service-performance monitoring, compliance alignment, risk documentation, issue tracking, and remediation follow-up.
  • Validated SOC 2 compliance and security controls for cloud service providers, including Microsoft Office 365, during a CloudSOC implementation for a federal national-security agency, supporting data-security, privacy, and third-party risk requirements.
  • Managed Data Center Security implementation for Sears México, protecting legacy systems across 6,000+ endpoints and supporting continuous PCI-DSS compliance during regulatory audits.
  • Led implementation of SAS Risk Management for Afirme Bank, enabling credit-card risk analytics, financial-crime controls, and regulatory reporting support within a regulated financial institution.
  • Oversaw cybersecurity governance and risk projects involving DLP, Altiris, CMDB, Data Center Security, endpoint protection, and security-service documentation.
  • Reported vendor risk events, service issues, performance indicators, compliance findings, and remediation status to senior leadership and client stakeholders.
  • Hire, coach, and develop team members; coordinate cross-functional collaboration among IT, cybersecurity, Legal, Compliance, vendors, and client leadership.
  • Negotiate and renew enterprise cybersecurity and managed-service contracts while monitoring service quality, business continuity, and operational risk.

SENIOR PROJECT MANAGER

3 Months
ACS-Inc. (Xerox Services) | 04.2012 - 07.2012
  • Managed global project execution for the McDonald's Global account, coordinating cross-functional teams and third-party service providers across multiple geographies.
  • Managed delivery dependencies, stakeholder communications, issue escalation, and execution governance within a global service environment.
  • Directed complex project portfolios, aligning scope, schedule, and deliverables with client requirements.
  • Directed changes to project scope and cost and implemented appropriate change management processes to keep project on track.
  • Presented regular status reports to executive leadership, providing insights into progress made toward achieving key milestones.

IT DELIVERY MANAGER

1 Year 7 Months
IIDEA-Solutions | 08.2010 - 03.2012
  • Oversaw commercial follow-up and technical delivery of IT solutions for steel-industry clients.
  • Coordinated vendors, technical teams, customer stakeholders, solution alignment, and proof-of-concept activities.
  • Developed technology demonstrations focused on operational value, service adoption, and business outcomes.
  • Managed time efficiently in order to complete all tasks within deadlines.
  • Demonstrated strong organizational and time management skills while managing multiple projects.

INFRASTRUCTURE & SECURITY / SENIOR PROJECT LEADER

6 Years 10 Months
Deacero | 10.2003 - 08.2010
  • Managed enterprise cybersecurity infrastructure for 9,000+ endpoints across Mexico, the United States, and Europe.
  • Led operational management of Symantec Endpoint Protection, Messaging Gateway, and DLP solutions in a multinational environment.
  • Managed security-vendor relationships and verified that third-party security tools aligned with internal governance, risk, and compliance requirements.
  • Managed 500+ servers and data centers across Mexico and the United States, coordinating infrastructure, security, operational, and service-continuity requirements.
  • Coordinated cross-functional technical initiatives involving enterprise infrastructure, endpoint security, messaging security, data protection, vendors, and business stakeholders.
  • Led cross-functional project plans, aligning engineering, operations, and procurement deliverables.
  • Managed budgets prudently, achieving cost reductions without compromising on quality or delivery timelines.
  • Managed cross-functional teams to ensure timely completion of complex projects.
  • Managed risk logs, issue tracking, and escalation paths for critical project decisions.

Education

Master of Science - Computer Science

Tecnológico De Monterrey (ITESM) | Cuernavaca | 12.1994

Bachelor of Science - Computer Science

Tecnológico De Morelos | Cuernavaca | 12.1991

Diploma - Alta Direccion

IPADE Business School | Ciudad De Mexico | 12.2016

Skills

Cybersecurity Leadership | Security Operations Governance | Cybersecurity Risk Management | Incident Escalation and Response Coordination | Endpoint Security | EDR and Endpoint Protection Programs | Data Loss Prevention (DLP) | Anti-Phishing and Messaging Security | Encryption | Security Vendor and MSSP Management | Cloud and SaaS Security Governance | Security Metrics and KPI Management | Executive Risk Reporting | Root-Cause and Remediation Coordination | Audit Readiness | PCI-DSS | SOC 2 | Data Privacy and Protection | ITIL | TOGAF | Cross-Functional Team Leadership | Team Hiring and Coaching | Contract and Service-Level Management
Endpoint protection and EDR programs | Symantec/Broadcom security technologies | Check Point | Microsoft Office 365 | CloudSOC | DLP | Messaging Gateway | Anti-spam | Anti-phishing | Encryption | Altiris | CMDB | SAS Risk Management | Data Center Security | PCI-DSS | SOC 2 | Security governance and risk reporting
IT asset management
Project management
Information security
Cybersecurity

Certification

  • TOGAF 9 Certified – Enterprise Architecture Framework
  • ITIL Foundation Certificate in IT Service Management
  • Knight – Engineer 2026 – Broadcom/Symantec advanced certification

Personal Information

Title: CYBERSECURITY & INCIDENT RESPONSE LEADER

ADDITIONAL INFORMATION

  • 25+ years of technology and cybersecurity leadership experience.
  • Enterprise-scale experience across Mexico, the United States, and Europe.
  • Experience supporting government/national-security, financial-services, manufacturing, retail, and oil-and-gas environments.
  • Available for senior cybersecurity leadership roles focused on security operations, cyber resilience, incident coordination, governance, and enterprise risk reduction.

Timeline

DIRECTOR OF IT SERVICES, CYBERSECURITY & RISK

Nuga Sys
08.2012 - CurrentRead More

SENIOR PROJECT MANAGER

ACS-Inc. (Xerox Services)
04.2012 - 07.2012Read More

IT DELIVERY MANAGER

IIDEA-Solutions
08.2010 - 03.2012Read More

INFRASTRUCTURE & SECURITY / SENIOR PROJECT LEADER

Deacero
10.2003 - 08.2010Read More

Tecnológico De Monterrey (ITESM)

Master of Science from Computer Science
Read More

IPADE Business School

Diploma from Alta Direccion
Read More

Tecnológico De Morelos

Bachelor of Science from Computer Science
Read More
HÉCTOR VÁZQUEZ GONZÁLEZ