IT & Operation Divarian divisions where acquired by Haya Real Estate. I worked in the merging of the security practice of both companies.

As a CISO, I am working on the design and implementation of a cybersecurity maturity capabilities framework to determine the maturity level of the organization based on the maturity level of each business processes. This framework is based on NIST 800-53 standard, ISO 27001 of Information security management systems, ISO 22301 of Business continuity management systems and Magerit. Having a cybersecurity maturity capabilities framework brings to the organization the possibility to assign a maturity level to each business process based on its risk level, being able to detect inefficiencies and to implement quick wins to eradicate those inefficiencies.

- Manage and deliver program from the early planning phase through the successful deployment of the different projects.- Lead a team of consultants and analysts during project deliveries.- Assist clients in developing strategies to create a holistic security ecosystem by providing high value consultancy work.- Facilitate executive crisis management workshops and role plays.- Conduct Cloud Strategy Workshops, Assessments and Develop Customer Cloud Transformation Roadmap.- Design and develop security architectures for cloud and cloud/hybrid based systems.- Communicate clearly on technical concepts and issues to non-technical business leadership, including translating technical security verbiage.- Contribute to the technical development of the staff.- Perform current state assessments of the security ecosystem, including benchmarking/maturity assessments, developing strategies and roadmaps for improvement.

- PwC Studies and Publications.- Innovation Proyects: Ideation to Implementation.- Critical infrastructures protection: Sectorial Strategic Plans definition, development of Operator Security Plans and Specific Protection Plans.- Business Continuity: development and implementation of Business Continuity and Disaster Recovery Plans.- Due Diligence.

I started as a programmer and I was promoted to an analyst early on. I took part on most of the strategic projects in the company.