MSc Cyber Security, GRC Consultant, Programmer, IT Trainer

Cyber Awareness / Cyber Essentials and ISO 27001
Evaluated people, processes and technology to understand existing security and vulnerabilities and to better align the cyber security strategy with the company's objectives, current reality and available budget
Defined and implemented ITIL processes, procedures and work instructions for senior staff members clarity and their review, prior to implementation
Created and maintained asset, risk and roles and responsibilities registers
Developed, maintained and deployed cyber security awareness training for upper and middle management as well as all employees, including in person presentations and training
Developed, maintained and deployed a Phishing Program, which from day one, allowed the identification of an ongoing advanced spear-phishing attack, saving the company thousands of euros
Assisted the CTO regarding the replacement of the laptop fleet to allow easier and consistent centralised control, once complete, deployed security policies to protect them while at the same time meeting some of the Cyber Essentials criteria
Performed internal audits on different topics like Information leakage by systems and people
Defined and implemented security policies for senior staff review as to address identified security vulnerabilities, correct human behaviours as well as to bring already existing policies up to date
Developed, maintained and delivered an information classification strategy (ISO 27001) including handling and labelling instructions for the company's largest information storage system
Began the definition and implementation of an incident response plan, supported by NIST 800-61 as to mature it from existing fire fighting approaches
Managed an open “door”/Instant Messenger policy by motivating staff (and reinforcing that they should) to come and discuss their security concerns, thus grating more eyes, thus more visibility and reinforcing the company's human firewall

Self employed (autonomo part-time contracts)
August 2023 - August 2024
remote, Spain
● Collaborated with cross-functional teams and mentored junior developers, reducing onboarding time, ramping
up skills and fostering a culture of collaboration and technical excellence.
● Developed desktop cybersecurity solutions using Behavior-Driven Development (BDD) and Test-Driven
Development (TDD), reducing defect rates and ensuring robust, high-quality code.
● Built and delivered a web application for health-tech organizations with Angular and TDD, improving user
experience and reducing development cycle time.
● Oversaw the end-to-end software development lifecycle (SDLC), translating business needs into technical
specifications and delivering successful production releases that exceeded client expectations.
● Actively participated in Agile sprints, driving iterative development and achieving consistent on-time delivery of
high-priority features.
Skills: Python, Bash, VBScript, Google Workspace, JavaScript, Angular, Linux, MacOS, Git, HTML, CSS, communication and
presentation skills, Agile.

Performance enhancements on existing iPhone and Android applications via introduction of JavaScript prototypal inheritance in
order to substantially reduce code complexity, promote code reuse and thwart existing technical debt and its expansion.
Development efforts supported by behavioural (BDD) and test-driven development practices (TDD) over Kanban. Mentoring of
a team member in apprenticeship. Intranet documentation updates of procedures and best practices. Contributions to the
enhancement of the continuous integration environment.
Keywords : JavaScript, KnockoutJS, SinonJS, Jasmine, Protractor, Gulp, JSON, Bower, Npm, CSS, LESS, HTML, Git, Gitlab, Selenium, REST and
Jira. Some Linux, Shell Scripting (BASH), Swift and Klotin.