Accountable for the effective management of Cyber Risk activities globally. Define and monitor Group Cyber Risk Appetite statement, and the approach for active risk management and oversight to be executed within regions and business functions. Group liaison on Cyber risk topics with regulators and auditors.

Create and lead a Cyber Security Maturity Assessment programme, based upon standards, regulations and best practices, to provide a risk approach-based roadmap to cost-effectively enhance cyber security resilience. Ensure disruptive Cyber scenarios are integrated within broader Business Continuity and Crisis Management processes (including Disaster Recovery Strategies and Testing scenarios).

Oversee Santander Information Security programme. Manage the adequacy and effectiveness of cyber controls, ensuring compliance with global policies and regulations.

Conduct internal information security reviews across Santander entities to ensure appropriate controls are in place. Provide actionable outputs to improve cyber security posture.

As part of Internal Control team, defined and implemented IT SOX Control Framework across Santander financial entities. Strong collaboration with both business and IT teams. Developed Internal Control Management dashboard.

IT Audits and Risk Management advisory for banks and large corporations.