Elvin Gonzalez
Tampa,FL
Summary
Security professional who identifies, quantifies, and documents cyber risk across enterprise and clinical environments. Experienced in third-party risk management for 200+ vendors, control testing, and incident response support, with a compliance foundation in HIPAA, NIST CSF, and PCI DSS. Growing focus on AI governance and risk.
Overview
1
1
Certification
6
6
years of professional experience
Work History
Cybersecurity Analyst, Governance, Risk, and Compliance (GRC)
Tampa General Hospital
Tampa, FL
06.2024 - Current
- Developed and enforced security policies and controls aligned to NIST CSF, HIPAA, HITRUST, and PCI DSS, supporting audit readiness across a health system serving thousands of patients and staff
- Led end-to-end third-party risk management (TPRM) for 200+ vendors, assessing security controls, quantifying risk through a standardized scoring methodology, and advising business and IT stakeholders on risk-based onboarding decisions
- Partnered with IT, engineering, and clinical application teams to evaluate data flows across systems, third-party integrations, and network architecture, identifying exposure points and security gaps and documenting findings to strengthen controls protecting ePHI
- Triaged Microsoft Purview DLP alerts and tuned detection rules to reduce false positives and surface true data exfiltration risks, supporting incident investigations with evidence reports
Senior Claims Analyst
Actna/CVS Health
Remote
08.2021 - 06.2024
- Developed triage and escalation procedures to prioritize contract issue requests in a high-volume environment, improving processing efficiency
- Onboarded and trained 100+ analysts on company policies, procedures, and systems, ensuring consistent HIPAA-compliant workflows
- Provided informal subject matter expertise on claims compliance, identifying patterns in adjudication errors and supporting process improvement initiatives
IT Support Specialist
Concentrix
Tampa, FL
09.2020 - 08.2021
- Corrected hardware, software, and network connectivity issues by diagnosing faults and completing skilled repairs
- Fielded incoming help requests via help desk tracking tools, telephone and e-mail
- Enforced endpoint security procedures to safeguard data, software, and hardware in compliance with organizational security policies
- Administered user accounts, security group permissions, and access controls within Active Directory, supporting least-privilege access principles
Education
Associate of Science - Cybersecurity
Hillsborough Community College
Tampa, FL05-2023
Skills
- Security Operations: Incident Response & Documentation, DLP Monitoring & Tuning, Alert Triage & Investigation, Microsoft Purview (DLP & eDiscovery)
- Risk & Compliance: Third-Party Risk Management (TPRM), Risk Assessment, Control Testing & Validation, Audit Support, NIST CSF, HIPAA, HITRUST, PCI DSS, AI Governance & Risk (NIST AI RMF)
- Identity, Cloud & Tools: Active Directory, Microsoft Entra ID (Azure AD), Microsoft Azure, ServiceNow, Data Classification & Protection
Certification
- CompTIA Security+
Timeline
Cybersecurity Analyst, Governance, Risk, and Compliance (GRC)
Tampa General Hospital
06.2024 - Current
Senior Claims Analyst
Actna/CVS Health
08.2021 - 06.2024
IT Support Specialist
Concentrix
09.2020 - 08.2021
Associate of Science - Cybersecurity
Hillsborough Community College