Freelancer profile translated to English.

Description

IT Security Engineer with over ten years of experience in cybersecurity, systems auditing, and technology risk management. I have worked in protecting critical infrastructure in key sectors such as energy, transportation, and finance, ensuring the security of digital assets and business continuity. My focus is on designing and executing strategies to mitigate threats, as well as complying with international and national standards. My experience includes implementing advanced IT security solutions, risk analysis, and security incident response. I consider myself an adaptable leader, with a constant capacity for learning and collaboration, which allows me to manage multidisciplinary teams focused on information protection and continuous improvement of cybersecurity processes.

Industry field of expertise

Languages

Spanish
Native or bilingual

Workplace preferences

Remote only

Primarily works remotely

STRATIO
Corporate Security Manager
TELECOMMUNICATIONS
May 2022 - Today (4 years and 1 month)
Madrid, Spain
Creation and execution of the cybersecurity strategy, aligning security objectives with business objectives to ensure protection against security threats and vulnerabilities. Implementation of the Information Security Management System (ISMS) based on ISO 27001, adapted to standards such as ENS (high category), PCI-DSS, ISO 27017, ISO 27018, and ISO 42001. Development of security policies and configuration of 400E firewalls, intrusion detection systems, and log centralization to improve perimeter security. Coordination of security incident response, including identification, containment, and recovery from security events. Supervision of continuous monitoring using tools such as DLP "FortiSase", SIEM "FortiSIEM", and XEDR "Wazuh" for threat detection and response. Implementation of cybersecurity training programs for employees, improving awareness and incident response. Regular cybersecurity reports to senior management. Development of hardening guides for critical systems, ensuring vulnerability reduction. Development of security key performance indicators (KPIs).
OKR Project Management CISO ISO 27001 ISO 42001
GOVERTIS ADVISORY – TELEFONICA TECH
Lead Technical Advisor.
TELECOMMUNICATIONS
March 2020 - May 2022 (2 years and 2 months)
Madrid, Spain
Lead projects for the implementation of Information Security Management Systems (ISO 27001), Information Security Plans, and Business Continuity (ISO 22301) in various organizations, ensuring data protection and operational resilience. Advised on cybersecurity and consulted on international and national legal frameworks. Developed and executed Security Master Plans, improving companies' IT security posture, and trained employees through courses and cyber exercises, strengthening their cybersecurity awareness.
Cybersecurity ISO 27001 National Security Scheme ISO 22301 Auditing
HAYA REAL ESTATE
Security Audit Manager
August 2018 - March 2020 (1 year and 7 months)
In my role as Security Audit Manager at Haya Real Estate, I was responsible for coordinating and executing strategic audit plans, ensuring a comprehensive assessment of the organization's IT security and regulatory compliance. I conducted thorough periodic security audits, identifying potential risks in information systems and operational processes. I collaborated with the IT and legal teams to implement information security improvements and ensure continuous compliance. I continuously monitored updates in security regulations and standards to proactively adapt the organization's policies to current standards. I participated in the implementation of internal controls to minimize cybersecurity risks and strengthen the organization's security posture.