Cristhian Zamora
Summary
Master’s Degree in Cybersecurity from ECE Paris Ecole d'Ingénieurs (France) and the Transilvania University of Brasov (Romania). Academic background in Telecommunications Engineering from the National University of Engineering (Peru).
Cybersecurity professional with 2 years of experience, including a role as Senior Auditor at the largest bank in Peru. Skilled in penetration testing of web applications, mobile apps, infrastructure, and networks.
Holds certifications including CCNA, eJPT, eWPTv2, ISO 27001 Lead Auditor, and AZ-500. Recognized for being analytical, responsible, and innovative, with strong professional ethics and a fast learning ability.
Currently based in France (Peruvian resident in Europe) and open to relocation within Europe.
Overview
5
5
years of professional experience
Work History
IT and Cybersecurity Sr. Auditor
BANCO DE CREDITO DEL PERU (BCP)
08.2023 - 11.2024
- Performed penetration testing on mobile apps (e.g., Yape, BCP Mobil), web applications, APIs, infrastructure, and Active Directory, identifying critical vulnerabilities and validating remediation.
- Conducted cybersecurity audits across IT systems and business areas using frameworks such as NIST CSF, ISO/IEC 27001, and others, ensuring compliance and operational resilience.
- Delivered technical audit reports with risk-based recommendations, aligning IT governance with regulatory requirements and business goals.
Cybersecurity Consultant
ENTELGY INNOTEC
09.2022 - 08.2023
- Supported clients in comprehensive cybersecurity assessments and audits using defence-in-depth, NIST, ISO 27001, and CIS Controls frameworks, helping them strengthen their information security policies and procedures.
- Performed ethical hacking and vulnerability assessments to identify weaknesses and recommend remediation strategies.
- Led threat modelling activities and developed critical security matrices such as Threat Tree, Use Case, Segregation of Duties, and Critical Role Matrices to guide client risk management and mitigation efforts.
Young Executive
TELEFONICA
01.2020 - 06.2022
- Administered IMEI blocking/unblocking in Telefónica's EIR and managed data for compensation and refund processes using Microsoft SQL and Oracle.
- Supported IT transformation projects and coordinated data collection, documentation, and reporting across Systems, Network, and Security departments.
- Managed and validated IT information requests for regulatory bodies (OSIPTEL), ensuring compliance and avoiding operational contingencies.
Education
Master Degree in Cybersecurity Management
ECE Paris Ecole D'Ingénieurs
01-2026
Master Degree in Cybersecurity
Transilvania University of Brasov
06-2026
Bachelor In Telecommunications Engineering
National University of Engineering (UNI)
04-2021
Skills
- Azure and AWS
- Kali Linux
- Python language
- Proficiency in Burp Suite, Metasploit, NMAP
- SQL Server
- Web, Mobile, API and Infrastructure Penetration Tester
- Ethical Hacking
- Hands-on experience in ethical hacking and offensive security
- ISO 27001 Lead Auditor and NIST CSF
- OWASP Top 10 familiarity
- Firewall
Languages
Spanish
Bilingual or Proficient (C2)
English
Advanced (C1)
French
Intermediate (B1)
German
Beginner (A1)
CYBERSECURITY CERTIFICATES
- Web Application Penetration Tester (eWPTv2)
- Cisco Certified Network Associate certificate (CCNA)
- Junior Penetration Tester Certification (eJPTv2)
- AZ-500 Azure Security Engineer Associate
- Certified ISO 27001 Lead Auditor - I27001LA
- SC-900 Security, Compliance, and Identity Fundamentals
- Ethical Hacking Essentials (EHE)
- CCSK v4.1 Foundation Training
Timeline
IT and Cybersecurity Sr. Auditor
BANCO DE CREDITO DEL PERU (BCP)
08.2023 - 11.2024
Cybersecurity Consultant
ENTELGY INNOTEC
09.2022 - 08.2023
Young Executive
TELEFONICA
01.2020 - 06.2022
Master Degree in Cybersecurity Management
ECE Paris Ecole D'Ingénieurs
Master Degree in Cybersecurity
Transilvania University of Brasov
Bachelor In Telecommunications Engineering
National University of Engineering (UNI)