Yonathan Rivas

Senior GRC and information security consultant. FTC Safeguards Rule, HIPAA, NIST CSF and AI governance.

Twenty years turning complex technology problems into solutions that hold up under scrutiny.

I help organizations manage technology risk, strengthen information security, and turn regulatory obligations into controls, ownership and verifiable evidence. The work is practical: policies people follow, controls that run, documentation an auditor or regulator can read.

Two decades designing infrastructure, automating processes and solving technology problems across Venezuela, the Dominican Republic, Colombia and Spain. That background means I understand your systems before I write a control for them.

For Florida clients, two things tend to matter: you work directly with the consultant doing the work, and I cover AI governance, a gap most security consultants have not filled yet. I work in English and Spanish, across both U.S. and European frameworks.