Davidا Matesanzا Ureña ا Email & Phone Number

Within Santander I took over more responsibilities as Global CISO of WM&I division which includes my previous position in Santander Asset Management and Private Banking and Insurance businesses.Leaded the Cybersecurity for the 3 business in the 15 countries were Santander and WM&I division operates.Defined the goals and measured the cybersecurity posture of the 3 different business in a complex organization with multiple stakeholders. Set up and leaded the WM&I Cybersecurity Teams included the CISOS of the entities and countries of the Division.Awarded in PWM (Financial Times Group) Wealth Tech Awards 2023 as Best private bank for cyber security (Global)Awarded in PWM (Financial Times Group) Wealth Tech Awards 2024 as Best private bank for cyber security (Global)

Information Security managementE-commerce, E-business and CybersecurityCybersecurity and digital MarketingCommunication of Cybersecurity incidentsPrivacy and marketing

Madrid Area, Spain

Leaded cybersecurity in Santander asset management including the 11 countries where SAM operates. Implemented Santander cyber security framework.Rolled out new security services, processes technologies and controls. Defined and executed the cyber transformation plan for all SAM countries, achieving top results in terms of control implementation and cyber maturity evolution.Closed the cybersecurity gap with the rest of Santander entities in 2 years.Implemented a cybersecurity governance and organization from both risk and compliance and technical point of view.Dealt with internal and external audits.As interim CTO, I Started up SAM’s cloud strategy and rolled out in production the first 8 workloads needed for business digital transformation. I started up the cloud center of excellence in SAM included the team, the architecture and operating model. Implemented a control model to monitor compliance and cybersecurity implementation in cloud environment.

Madrid

Started up the Regional Information security Officers team in Daimler Group Services Madrid which implements and leads the security activities for the Mercedes Benz companies in the different European Countries.Leaded the Information Security in Mercedes Benz Spain, Portugal and Switzerland (2014-2016)ISO coordinator for Europe and North America (17 countries) (2015- now)Leaded the Information Security in Mercedes Benz UK (2016-now)Leaded the Security work package in the project Sales Datacenter Europe. A project to consolidate infrastructure and operations of 15 Countries in one datacenter and operations team included IT security.Defined and organized the security services that the team implement in the countries like: Security management and planning, Security in software development life cycle, Security architecture, "Pentesting", Risk management, Information classification, Incident management, logging and forensic...etc.

Analyzed and evaluated security measures to find violations of the security policy and cyber security breaches.Identified, provided mitigation and security solutions to projects and initiatives. Worked on requests for Information and request for proposals for new security projects.Coordinated delegated and monitored to the following cyber security services:•Information Security Incident response: Dealing with more than 40 incidents per year, and coordinating more than 20 business and IT departments.•Threat and vulnerabilities management: Vulnerability and threat analysis on over 180 business applications. More than 400 new managed vulnerabilities per year•Security Information Event Management: Events from more than 460 managed devices, more than 400 reports and 100 correlated alerts.•Corporate Cryptographic service: giving advice to over 30 business process using digital signature, time stamping, certificate validation, and encryption services.•Ethical Hacking audits: Defining targets and carrying out technical audits on over 180 business applications and IT services.•PKI and key management: Managing processes related to the creation, renewal, revocation and custody group cryptographic key.As project leader: Installation and setup of the PKI, Virtual smart card and a digital signature service, for 5,000 users

For 1 year in 2007 I was Head of systems and network securityDefined and validated network and systems security architectures.Identified cryptographic requirements and standards for digital business process.Managed threat and vulnerabilities and carried out the annual Ethical HackingConsolidated the Security Information Event Management (SIEM); Coordinated the antimalware strategy (up to 21,000 computers, 1,000 servers and 55,000 users); As project leader: Initiated the incident response process (CERT) and digital surveillance; Analyzed and designed the Burofax security solution; Designed and implemented services to operate the security SW and devices; Installed and set up digital signature, SIEM and perimeter backup infrastructure; Network segmentation

I led projects of the IT security plan about systems and network security. Carrying out Internal and external Ethical hacking, Malware security systems, Remote network access, and hardening of mobile devices. System hardening procedures.

Executed internal and external penetration testing. Black and white box of Operating systems, networks Data Base, Web applications, and security devices. Primary customers: INDRA, Banesto, Iberia and ATCA.

During my last years of University, as well as being at university I was in a part time Internship in Correos. Firstly I worked on the IT department where my role was to manage the email, Internet access, public web services and perimeter security. Then I did a full time internship program. I analyzed the vulnerabilities and defined the system security and data base software of the organization. I managed risks and security incidents, identified the necessities of perimeter security and the company´s antivirus software and safe-keept of the corporate digital certificates

Mba, Executive Mba At Ie Business School

Ingeniero Informático, Ingeniería