Ricardo is an experienced IT and compliance professional with more than 20 years of experience spanning information technology, data center management, healthcare technology, information security, privacy, risk management, and compliance auditing. He has been with ControlCase for 14 years, where he has developed extensive expertise in helping organizations navigate complex compliance and assurance requirements while translating technical and regulatory expectations into practical, business-focused solutions.

With a strong focus on SOC and ISO compliance and assurance, Ricardo brings a unique combination of technical, operational, and audit experience to each engagement. His approach is centered on understanding how an organization actually operates, identifying areas of risk and opportunity, and helping clients develop effective controls, policies, procedures, and documentation that support both compliance objectives and broader business goals.

Ricardo is particularly focused on helping clients move beyond a “check-the-box” approach to compliance. He works to provide organizations with meaningful insight into their control environments and risk posture, enabling them to strengthen processes, improve operational maturity, and demonstrate greater confidence to customers, partners, regulators, and other stakeholders. Ricardo approaches each client in a partnership approach with fairness, but rigor to uphold the requirements of the standards.

He holds a Bachelor’s degree in Information Technology with a concentration in Information Security from the University of Phoenix and a Master’s degree in Secure Information Systems Management from George Mason University. Ricardo hold the following professional certificates: ISO 27001 Lead Auditor (LA) and Lead Implementer (LI), CSA – Certificate of Cloud Security Knowledge (CCSK), Certified Systems Auditor Professional (CISA), and has previously held PCI QSA and HiTrust CCSFP designations.