Yoxan Gonzalez Higueros

Seasoned cybersecurity leader with extensive experience as Lead of Vulnerability Management Operations. Directed enterprise-wide vulnerability management programs, overseeing the identification, assessment, prioritization, and remediation of security vulnerabilities across diverse IT infrastructures, networks, and applications. Led cross-functional teams in executing vulnerability scans, analyzing results, tracking remediation efforts, and delivering actionable reporting to stakeholders and senior leadership. Excelled in developing scalable processes, implementing risk-based prioritization frameworks, and driving compliance with industry standards (e.g., NIST, CVSS). Proven track record in reducing remediation timelines, enhancing operational efficiency, and collaborating with IT, DevOps, and security teams to minimize organizational risk exposure while ensuring minimal business disruption

Experienced in designing and implementing business solutions within the Microsoft ecosystem. Skilled in automating processes with Power Automate, customizing Dynamics 365 (Sales, Customer Service, Marketing, Finance), and integrating AI through Copilot to enhance productivity and decision-making. Strong background in consulting, requirements gathering, and delivering end-to-end digital transformation projects. Expertise in Azure AD security, data compliance, and user training to drive adoption and business value.

Experienced and results-driven IT professional with a proven track record of managing and resolving complex service requests within the Dynamics 365 Platform, ensuring rapid, efficient, and customer-centric support. I specialize in diagnosing and troubleshooting critical technical issues using advanced Microsoft technologies including Azure, PowerShell, Office 365, Copilot, and Unify, delivering high-quality solutions under pressure. In my current role, I lead cross-functional teams to drive collaboration and implement forward-thinking solutions that enhance both customer experience and operational performance. I oversee the Dynamics Power Center, where I design and deploy scalable, high-performance implementations that boost platform functionality and business value. My approach is deeply analytical and data-driven. I harness a modern data stack—SQL, Kusto, Power BI, Azure Data Lake, Databricks, and MongoDB—to execute advanced analytics strategies. This enables me to uncover actionable insights, streamline processes, and ensure alignment with both client goals and organizational strategy. Combining technical excellence with strong interpersonal skills, I build trusted relationships across business units, consistently delivering impactful, measurable outcomes that support digital transformation and continuous improvement.

As a results-driven IT leader, I coordinate and lead multidisciplinary teams to deliver high-impact projects and maintain operational excellence. Leveraging Office 365 tools (Word, Excel, PowerPoint, Teams, SharePoint), I drive collaboration, streamline workflows, and ensure transparent communication across all stakeholders. I facilitate the co-creation and real-time editing of shared documents, manage virtual meetings, and oversee effective tracking of project milestones. My leadership style fosters a collaborative, accountable, and high-performance team culture. I actively mentor team members, resolve conflicts proactively, and promote a positive and productive work environment.
I manage and prioritize IT incidents using ServiceNow, strategically assigning tasks and tracking progress to resolution. With strong project management capabilities, I lead agile IT initiatives using SCRUM and Jira to plan sprints, assign deliverables, and monitor progress against key objectives. I respond decisively to critical incidents, coordinating cross-functional response teams to restore services swiftly and minimize downtime. I apply advanced tools such as Ctrl-M for process automation and Splunk and AppDynamics for real-time monitoring and data analysis—enabling informed, data-driven decision-making and early detection of anomalies. My technical scope includes working with mainframe systems, processing and analyzing large datasets to extract insights that inform strategic decisions. I produce clear documentation and process diagrams in Excel to support informed decision-making across technical and non-technical audiences. Collaboration is at the heart of my work: I maintain continuous communication with global support teams, particularly in India (Tiers 1, 2, and 3), to resolve critical incidents and drive process improvements.

Experience in cybersecurity, data protection, and secure infrastructure management. I led the development and execution of advanced SQL Server queries to extract, manipulate, and analyze large volumes of sensitive data, ensuring insights were leveraged for strategic decision-making. To safeguard this data, I implemented encryption mechanisms both in transit and at rest, aligning with best practices and compliance standards. I created interactive dashboards using Power BI, directly connected to SQL Server, to visualize security trends, identify vulnerabilities, and support data-driven cybersecurity decisions.

In the realm of infrastructure protection, I configured and managed security controls on critical assets using tools such as the F5 Web Application Firewall (WAF). My responsibilities included monitoring network traffic to detect and mitigate threats like DDoS attacks, intrusion attempts, and other suspicious activities. I played a key role in managing hybrid and cloud environments (AWS and Azure), implementing security measures such as role-based access control (RBAC), encryption, and continuous auditing to ensure compliance and operational integrity. I also developed secure authentication and monitoring systems for IoT devices integrated into corporate networks, and conducted vulnerability assessments on communication protocols like MQTT and CoAP. These efforts were guided by frameworks and standards including ISO 27001, ISO 27032, and the NIST Cybersecurity Framework. My work involved performing risk assessments, leading compliance audits, and crafting tailored security policies for critical infrastructure environments. In Linux-based systems, I automated essential security operations such as log monitoring, patch management, and anomaly detection to improve response efficiency. I implemented unified threat management (UTM) and endpoint detection and response (EDR) solutions to protect against malware and unauthorized access.