CLARIBEL RODRIGUEZ
Waxhaw,NC
Summary
Results-driven Information Security professional with 10+ years of experience in Third-Party Risk Management (TPRM), privacy, and compliance across healthcare and technology sectors. Proven ability to lead vendor risk programs, strengthen security posture, and align security frameworks with business objectives. Deep expertise in SOC 2, ISO 27001, NIST, HIPAA, and PCI compliance, with a strong track record of driving risk remediation and influencing cross-functional stakeholders.
Overview
15
15
years of professional experience
1
1
Certification
Work History
Staff Information Security – TPRM
SentinelOne
04.2025 - Current
- Lead complex vendor risk assessments across high-risk third parties and enterprise applications
- Design and manage tiered security questionnaires (SIG) aligned with vendor risk profiles
- Evaluate SOC 2 reports, penetration tests, audit logs, and security artifacts to identify control gaps
- Develop and drive risk mitigation strategies across business and technical teams
- Represent InfoSec in contract negotiations to ensure security and compliance requirements
- Support compliance programs including SOC 2, ISO 27001/27002, and internal audits
- Contribute to automation and modernization of risk management processes
Senior Information Security Risk Specialist
SentinelOne
06.2020 - 03.2025
- Conduct end-to-end vendor security risk assessments and lifecycle management
- Partner with Legal to develop and review security contract language
- Deliver security awareness training programs and track effectiveness
- Manage phishing simulation platform and improve organizational security posture
- Provide actionable remediation guidance to reduce enterprise risk
Manager, Privacy & Security (HIPAA Privacy Officer)
Englewood Health
Englewood, NJ
07.2018 - 06.2020
- Led enterprise-wide information security and privacy program
- Served as HIPAA Privacy Officer ensuring compliance with federal and NJ state regulations
- Designed and implemented risk analysis and mitigation programs aligned with NIST and HIPAA
- Established monitoring processes for Protected Health Information (PHI) access
- Directed security audits, compliance initiatives, and policy development
- Managed PCI compliance and vendor risk management programs
- Conducted phishing simulations and enterprise-wide security training
- Collaborated with IRB and executive leadership on governance and risk decisions
Security & Privacy Analyst
Englewood Hospital Medical Center
Englewood, NJ
10.2015 - 07.2018
- Supported development of enterprise information security and privacy programs
- Drafted and maintained security policies aligned with regulatory requirements
- Performed risk assessments, audits, and compliance reviews
- Monitored systems for anomalies and supported incident response
- Assisted in vendor risk management and third-party assessments
Information Security Analyst
Jennison Associates
New York, NY
03.2013 - 10.2015
- Managed access recertification processes and application security controls
- Monitored and analyzed security logs and events to detect anomalies
- Supported vulnerability management and patch governance processes
- Administered tools including CyberArk, RSA DLP, Varonis, Bluecoat, and Netezza
- Partnered with business units to identify and mitigate technology risks
Information Security Analyst
Signature Bank
New York, NY
10.2011 - 03.2013
- Conducted incident response investigations and vulnerability assessments
- Managed Nexpose vulnerability scanning and remediation processes
- Developed and maintained security policies and standards
- Administered Bit9 application whitelisting
- Performed ongoing threat research and risk analysis
Education
Master of Science - Information Security / Information Assurance
Pace University
New York, NYBachelor of Science - Computer Programming & Information Systems
SUNY Farmingdale
Farmingdale, NYSkills
- Third-Party Risk Management (TPRM)
- Vendor Risk Assessments & SIG Questionnaires
- Regulatory Compliance: HIPAA, NIST, ISO 27001, SOC 2, PCI
- Risk Analysis & Mitigation Planning
- Security Audits & Control Assessments
- Contract Security Review & Negotiation
- Security Awareness & Phishing Programs
- Vulnerability Management
- Policy Development & Governance
- Cross-Functional Leadership & Communication
- Strong analytical and problem-solving skills
- Excellent communication and stakeholder management
- Highly organized with ability to manage multiple priorities
- Proven leadership in building and scaling security programs
- Teamwork and collaboration
Certification
- Certified in Risk and Information Systems Control (CRISC), ISACA
- Healthcare Information Security and Privacy Practitioner (HCISPP), ISC2
Languages
Spanish
Native or Bilingual
Timeline
Staff Information Security – TPRM
SentinelOne
04.2025 - Current
Senior Information Security Risk Specialist
SentinelOne
06.2020 - 03.2025
Manager, Privacy & Security (HIPAA Privacy Officer)
Englewood Health
07.2018 - 06.2020
Security & Privacy Analyst
Englewood Hospital Medical Center
10.2015 - 07.2018
Information Security Analyst
Jennison Associates
03.2013 - 10.2015
Information Security Analyst
Signature Bank
10.2011 - 03.2013
Bachelor of Science - Computer Programming & Information Systems
SUNY Farmingdale
Master of Science - Information Security / Information Assurance
Pace University