A global risk management executive with twenty-seven years advising boards and C-suites across the Americas. Enterprise risk, internal audit, SOX, IT and cyber risk, AI governance — for multinationals preparing for an IPO, scaling into new markets, or rebuilding a risk function that has drifted from what the business now requires.
Andres is a founding partner of Continental Risk Partners and leads the firm's risk advisory and internal controls practice. He works with publicly traded and privately held multinationals on the work that shapes business outcomes — enterprise risk programs, internal audit capability, SOX readiness and control optimization, IT and cyber risk, and AI governance — for organizations preparing for an IPO, scaling into new markets, or rebuilding a risk function that has drifted from what the business now requires.
Before founding CRP, he spent over twenty years as Principal at Grant Thornton, leading the firm's Florida Advisory Services practice. He built and led teams of more than forty professionals across fourteen Latin American markets and advised Fortune 1000 boards and audit committees on programs that cut compliance costs by up to 25% and reduced control deficiencies by 30%. SOX readiness and control optimization for clients with revenues exceeding $3B was a recurring discipline. Earlier, as Advisory Services Manager at PricewaterhouseCoopers, he led internal-audit, IT-audit, and risk-advisory engagements for multinational clients across more than ten Latin American markets.
Andres also served as Executive Sponsor of Mi Gente, Grant Thornton's Latino ERG — advancing Latino professionals into senior roles, sponsoring high-potential leaders, and shaping inclusive leadership practices at the firm-leadership level. He continues that work through the Latino Leadership Roundtable.
Three principles sit behind the way he works. Risk is a leadership discipline, not a compliance checkbox. Clarity belongs before consequential decisions, not in the post-mortem. And resilience does not respect jurisdictions or org charts — it has to be built into how an organization operates.