Description

I am a dedicated cybersecurity professional with over five years of in-depth experience securing cloud infrastructures, networks, APIs, web applications, and in the last year conducting advanced LLM red teaming assessments and MCP server security.

I also specialize in designing, implementing, and auditing security controls to ensure compliance with ISO 27001, PCI-DSS, NIS2, and SOC 2 standards.

As a committed lifelong learner, I continuously deepen my expertise to address evolving threats.

I welcome significant responsibilities and complex challenges, consistently delivering robust, risk mitigation and resilient security outcomes for organizations.

Languages

English
Native or bilingual
Spanish
Native or bilingual

Workplace preferences

Can work on-site

Barcelona (up to 50km)

Schneider Electric (Through Sii Group Spain),
Digital Innovation and Security Manager.
March 2025 - Today (1 year and 3 months)
Barcelona, Spain
In my role as a security manager, I am a key stakeholder in security activities that impact the business at different levels which involves being able to efficiently communicate information to both technical and non technical process and application owners.
API Security Secure Software Development Cloud Infrastructure Security Vulnerability Management AI Security
A2Secure,
Senior Cybersecurity Consultant.
May 2022 - March 2025 (2 years and 10 months)
Barcelona, Spain
My role as senior cybersecurity consultant involves working hands on and managing projects for clients in the
• Ensuring compliance with industry standards, including ISO 27001, DORA, PCI-DSS, and TISAX frameworks.
ELEPCO S.A.
ISO 27001 Junior Auditor.
April 2022 - May 2022 (1 month)
Latacunga, CT, Ecuador
• Review of section 8 (technical controls) of the annex A of the ISO27K12022 framework
Creation and review of ISMS processes and policies