Gonzalo Garcia

I am a vCISO (Virtual Chief Information Security Officer) with a holistic view of security: I don't see it as a technical silo, but as a key component of corporate governance that protects company value and builds trust in the final product. My approach is pragmatic, realistic, and results-oriented, acting as the necessary bridge between senior management (C-Level) and technical needs.

Strategy and Governance: I conduct maturity assessments, design security master plans, and manage budgets and RFPs. I assist internal CISOs with executive reporting to the Steering Committee.

Regulatory Compliance and NIS2: Comprehensive support in adopting NIS2, ENS, ISO 27001, and SOC guidelines. I work closely with the DPO office for GDPR compliance and sensitive data protection.

Operational Resilience: Strategic incident management, DFIR, and security control for the supply chain (suppliers and clients).

Security in the Software Development Lifecycle (SDLC): Implementation of DevSecOps models and software asset governance. My technical background allows me to speak the same language as your engineering teams to prioritize mitigations without blocking delivery.

Vulnerability Management and IAM: Design cyclical processes for asset discovery and resolution, as well as robust identity management systems (IDaaS, Azure AD).

New Technologies and AI: Strategic consulting for the secure adoption of AI frameworks (Copilot, GPT), Zero Trust architectures, and Cloud Security.

My commitment:Honesty and Efficiency

I am not a 'theory and PowerPoint' consultant. My job is to ground security in your operational reality, fostering a culture of awareness from the executive team to the frontline staff.