Oscar Golderos Blanco Email & Phone Number

Madrid, Community Of Madrid, Spain

Definición de la Regulación Digital Operational Resilience Act (DORA), de aplicación a todo el sector financiero. Coordinación con la Autoridad Bancaria Europea (EBA), la Autoridad Europea de Valores y Mercados (ESMA) y la Autoridad Europea de Seguros y Pensiones (EIOPA) como representante español en los grupos de trabajo para las 17 líneas que definen las normas técnicas de regulación de DORA. Áreas principales: Marco de control de riesgos tecnológicos; Clasificación, notificación y establecimiento de un hub europeo de incidentes tecnológicos; Políticas de gestión de terceros, subcontrataciones y registros de externalizaciones; Cooperación en los marcos de vigilancia; Pruebas de simulación de ciberataques para la mejora de la ciberresiliencia del sector financiero.Definición del marco y guía de implementación TIBER-ES para la realización de pruebas avanzadas de ciberseguridad (Threat Led Penetration Testing). Definición del protocolo de actuaciones, participación en los comités de seguimiento entre las autoridades competentes nacionales y verificación de idoneidad de proveedores.Ejecución de los análisis horizontales conjuntos del Supervisory Review and Evaluation Process (SREP) en su vertiente de riesgo tecnológico para las principales entidades bancarias españolas, así como presentación de resultados a la alta dirección.Impartición de cursos de ciberseguridad para distintas instituciones tanto nacionales como internacionales.Participación en foros y grupos de trabajo del Banco Central Europeo y la EBA, relacionados con la metodología de supervisión del riesgo tecnológico.

Madrid Area, Spain

Leading and participating in IT audits for AXA International New Markets (AXA INM), a branch formed by 32 countries that include EMEA, LatAm, and Asia regions. This comprises scoping, design, execution and reporting of audit programs.As an audit team leader, manage teams and workloads, conducting the assignments within the AXA INM companies according to the planned scope. Management of the organization and input collection from local audit and senior management.Presentation and discussion of issues detected and recommendations to the local Senior Management, supporting them in the development of a risk mitigation proposal and in the definition of management action plans. These action plans are monitored until their conclusion.Performance of annual IT risk assessments for the AXA INM operating companies and support to the Regional Head of IT Audit in the development of its annual audit plans.Periodic follow-up for the Group of the IT issues and mitigation action plans within AXA INM region.

Madrid Y Alrededores, España

Participation in the Global IT Strategy definition of the Telefonica Group: abstract, synthesis and consolidation strategies of Group operators, including local and global projects to align with the three-year Telefonica Global Strategic Plan.Precision of strategic plans in the annual budget of all IT operating business, alignment with corporate objectives, information aggregation and preparation of executive presentations. Update budget execution status through a half-year Forecast.Development of extensive monthly reports covering the development of actions defined in IT budgets. These reports include status and risks of initiatives, transformation objectives, financial implementation, monitoring / analysis of KPIs, security evaluations, contracts negotiations ... etc., periodically adding new areas and redesigning existing ones. These reports are shared with the corporate areas of the Group and the CIO of the 17 telecommunications operators of Telefonica Group.Perform of extensive specific analysis on areas of interest to the Group Executive Committee; e.g., the status and plans of Big Data in each Group operator or internal and external benchmarks (with respect to the major European telecommunications operators) in cooperation with Gartner and McKinsey consultants, covering matters as IT capacities delivered to the business and IT costs.Elaboration of digital transformation proposals and its associated development plans to optimize the efficiency of Telefonica IT businesses. Analysis of providers’ proposals and projects of competitors in the digital world, such as other Telco or OTT companies, to study lessons learnt to implement them in the Group.

Madrid Y Alrededores, España

Here, I worked as Experienced IT Senior Auditor within the Department of Systems & Process Assurance, dependent PricewaterhouseCoopers Assurance area.This job took me to develop many different projects including financial audits from IT perspective, revision of business processes, risk management and compliance of data protection laws. I participated mainly in audits of Insurance multinational companies, as well as audits in other sectors like Energy and Construction sectors. Audit of business processes: analysis and validation of complete processes identifying and evaluating manual and automated controls. Evaluation of controls to be implemented to improve security, effectiveness and efficiency of the processes audited.Support in the review of Information Technology General Controls (ITGC) based on COBIT methodology (IT Governance, Operations and Maintenance of IT Production, Acquisition of SW, development and implementation of IT systems, Security and Maintenance of Applications) within audits of accounts and financial statements.Use of ACL tool to perform tests with Computer Assisted Audit Techniques (CAAT). Security reviews of a wide range of systems and applications (Windows, UNIX, SQL Server, AS/400, Oracle, SAP, Navision, etc.).Preparation of audit reports, including further discussion of the results with the CIO and the responsible of Corporate Audit.Responsibilities in managing work teams.

Madrid Y Alrededores, España

Cataloging projects for Telefónica within Media and Telco department

Viena, Austria

Erasmus Master Student at the Telecommunications Research Center of Vienna (Forschungszentrum Telekommunikation Wien).Delay Impacts on human-to-human mediated interaction and end-user quality perception project design, execution and writing

Degree In Business Administration And Management, Business Administration And Management, General, 8.93/10

240 ECTS

Geografía E Historia, History, 9,2

Progreso actual: 20%

Master Thesis, Telecommunications Engineering

Institut für Nachrichtentechnik und Hochfrequenztechnik Fakultät für Elektrotechnik und Informationstechnik Technische Universität Wien

Ingeniero Superior De Telecomunicaciones, Telecommunications Engineering, Eac/Abet Masters Degree Accreditation

Especialidad en Gestión de Tecnología y Comunicaciones