As the global CISO responsible for 9 countries Cybersecurity, I led and managed different areas of the department, including Offensive Security, Security Operations, Security Infrastructure, and Consulting. I defined and maintained the Cybersecurity Strategy, ensuring appropriate levels of confidentiality, availability, and integrity of information. I worked closely with other managers across Cirsa to ensure security was embedded in all project delivery processes and reported on risks to facilitate management decision-making.Created, deployed, and audited security processes based on corporate policy and managed the Security Operation Center (SOC), incident response and remediation processes. I developed and maintained systems security compliance guides, ensuring that all security technologies were in place for a safe and secure work environment. As part of the Corporate Cybersecurity Committee, I made strategic decisions to identify, prioritize, and define mitigation measures based on risks.I also implemented application security policies and oversaw Security Awareness Programs and ensured compliance with GDPR and other relevant legal and regulatory requirements.Responsible for managing the Cybersecurity budget, contract and vendor negotiations, and working with vendors, outside consultants, and other third parties.As a result, i successfully protected the organization's assets and reputation from cyber threats, safeguarding critical systems and data.

Successfully created a new cybersecurity company through the merger of Indiseg and Evolium Security, resulting in 1.5M€ revenue in the first year of operation.Led the company's security operations and partnered with stakeholders to provide cybersecurity services and solutions to clients from various industries, including Financial, Telecom, Infrastructures, Entertainment, and Public AdministrationTeam building and management (over 15 team members), project management, business development, RFP, technical write-ups and documents, and internal procedures, also supported pre-sale activities.Conducted technical tasks including Penetration Testing, Web Application Security, Wireless Security Assessment, Vulnerability Assessment, Mobile device security, MDM, Risk analysis, Threat intelligence, Forensic analysis, Network Security, PCI assessments, Source code review, SSOO Hardening, Incident Response, Security training, SCADA Security, VoIP Assessment, Database auditing, SIEM, IDS, WAF, SDL, and product evaluation.Bought by Prosegur Ciberseguridad in 2016: http://www.prosegur.com/en/lineas-negocio/ciberseguridad

No cON Name es una asociación sin ánimo de lucro, nació en 1999 en la isla de Mallorca como respuesta a la necesidad congregar a hackers en España. Por ello, se realiza por primera vez, el primer congreso de hackers de forma pública.Objetivos:Fomentar los mecanismos de la seguridad informática.Organizar, gestionar y realizar eventos para la divulgación y promoción de la seguridad informática. Dichas celebraciones reciben el nombre de No cON Name (NcN).Apoyo y organización a los grupos de usuarios que deseen organizar eventos que la organización considere son afines con sus objetivos.Promocionar entre la juventud, el uso y los mecanismos de avance en la seguridad informática.Fomentar la seguridad informática a través de medios digitales, publicaciones escritas, audiovisuales y/o conferencias en medios ajenos a los de la asociación.

Responsible of security servicesCustomer relationships, Product security evaluation, Development of security procedures,Ethical hacking, Pentesting, Security / Vulnerability assessments, Incident Response, Computer Forensics, Network security, Wifi Security, VoIP Security, SIEM, DLP.

Member of tiger team doing security projectsPenetration testing, Web app. assessments, Wireless assessments, Forensics analysis, VoIP assessments, SSOO Hardening, Security tools, PCI assesments, Social Engineering.

Started as a junior security auditor involved on:• Web app. assessments• External pentest• i+D+i• Learning how security services business works

Started as a junior security auditor (trainee).