07/03/2026 updated
100 % available
ISO 27001 & ISO 42001 Lead Auditor | EU AI Act, NIS2, DORA | vCISO | MSc AI
Langreo, Spain
Worldwide
Computer Engineering - Universitat Ouberta de Catalunya ; MSc AIAuditingInformation Technology AuditISO/IEC 27001Security AuditsRisk Management
ISO/IEC 27001 (AENOR) and ISO/IEC 42001 Lead Auditor with an MSc in Artificial Intelligence and 30+ professional certifications (Microsoft, Cisco, AWS, Harvard, IBM, AENOR). I help European companies reach regulatory readiness — EU AI Act, NIS2, DORA, ISO/IEC 27001 and ISO/IEC 42001 — without endless projects or vendor lock-in.
As Head of Cybersecurity Department and Head of Compliance at a 150+ employee tech company (team of 3; also Product Owner for Microsoft 365), I have: led 2 consecutive external ISO 27001 audits with zero non-conformities (the first one two months after joining, from a blank documentation baseline); run the corporate ISMS aligned with ISO 27001, ENS and NIS2; deployed the full Microsoft Security stack in production (Microsoft Defender for Endpoint, Microsoft Sentinel SIEM, Intune, Purview DLP, Entra ID); built in-house AI solutions to automate security and compliance operations; and authored the business continuity plan, validated in real conditions during Spain's May 2025 nationwide blackout.
The combination of formal audit methodology (ISO 27001/42001 Lead Auditor) and hands-on AI systems knowledge (MSc AI) is a rare profile — exactly what the EU AI Act (full enforcement August 2026) requires from regulated organisations.
Core skills and focus areas: ISO/IEC 27001, ISO/IEC 42001, AI Governance, AI Management System (AIMS), EU AI Act, NIS2, DORA, ENS, GDPR/RGPD, ISMS implementation, internal and external auditing, Lead Auditor, risk management, gap analysis, Statement of Applicability, vCISO / virtual CISO / fractional CISO, security strategy, business continuity (ISO 22301), penetration testing (web and API), OWASP, Microsoft Sentinel, Microsoft Defender, Microsoft Intune, Microsoft Purview, Entra ID, SIEM, DLP, security awareness training, responsible AI.
Languages: Spanish (native), English (C1). Available remotely across the EU, with occasional on-site travel.
Experience
Professional experience5 - 10 years
Freelancer since2026
Languages
EnglishFluentSpanishNative speaker
Project history
Leading the corporate ISMS as Information Security Officer (ISO 27001, ENS, NIS2). Key outcomes:
- Led 2 consecutive external ISO 27001 audits (DNV) with ZERO non-conformities — the 2026 cycle delivered fully in-house, removing external consultancy costs.
- Deployed the full Microsoft Security stack in production: Defender for Endpoint, Sentinel (SIEM), Intune (MDM), Purview (DLP), Entra ID (MFA + conditional access).
- Built in-house AI automations for compliance and SOC operations (evidence drafting, alert triage, executive reporting).
- Authored the corporate business continuity plan, validated in real conditions during Spain's May 2025 nationwide blackout.
- Hired, onboarded and led a team of 4 systems technicians (2025-2026).
- Since Sep 2026: head of the Cybersecurity Department with a team of 3 direct reports (Business Analyst, Product Owner and a junior profile), still in charge of Compliance, and Product Owner for Microsoft 365.
Founded and led a technology community in Asturias: events, conferences and training on emerging tech and cybersecurity; talks and workshops across Spain on digital security and privacy; media appearances (radio/TV); partnerships and community growth.
Independent cybersecurity consulting for SMEs and individuals: security posture assessments, tailored remediation roadmaps, remote support and troubleshooting, plus security-awareness materials and technical documentation for non-technical stakeholders.