Carlo joined the PCI Security Standards Council early 2026. Prior to joining the Council, Carlo worked as a Qualified Security Assessor (QSA) for 8 years, conducting PCI DSS and PCI Software Security Framework (SSF) assessments for organizations across the United States, Spain, and Latin America. He has worked with merchants and service providers ranging from smaller organizations to large, complex multinational environments.

Carlo’s professional background includes IT auditing, penetration testing, and security consulting. Throughout his career, he has worked closely with different teams to interpret PCI requirements and evaluate security controls. He has also mentored AQSAs and developed and delivered educational material for non-technical audiences.

Carlo holds the CISSP and CISA certifications and a master’s degree in computer science and information technology. He is professionally fluent in English and Spanish.