03/01/2026 updated

**** ******** ****
100 % available

Cybersecurity & GRC | ISO 27001, NIS2 & Regulatory Compliance | Risk Management

Melilla, Spain
Worldwide
Degree of IT and Web Developmet, Master in Cybersecurity
Melilla, Spain
Worldwide
Degree of IT and Web Developmet, Master in Cybersecurity

Profile attachments

ISO_Rachid_en.pdf

About me

I work in cybersecurity governance and regulatory compliance, mainly in environments where regulation is demanding and operacional risk is real. My focus is helping organizations make sense of frameworks like ISO 27001 and NIS2.

ArchitectureAuditingBusiness ContinuityBusiness PlanningCertified Information Security ManagerCertified in the Governance of Enterprise ITComplianceComputer SecurityCyber LawsIncident ResponseGovernanceGovernance Risk Management and ComplianceIdentity ManagementInformation Security ManagementCyber Security StandardsISO/IEC 27000ISO/IEC 27001Risk AnalysisSecurity AwarenessSecurity PoliciesSecurity Requirements AnalysisInternal ControlsSecurity AuditsInformation Governance and ManagementInformation Security Management SystemIT Security StandardsRisk AssessmentGDPRISO/IEC 27002Safety PrinciplesRisk Management
I am an Information Security Officer and GRC specialist with strong experience designing, implementing and improving Information Security Management Systems (ISMS) aligned with ISO 27001 and international best practices.

My expertise covers Governance, Risk & Compliance (GRC), cybersecurity strategy, risk management frameworks, internal controls, and regulatory compliance. I work closely with executive leadership and technical teams to translate security requirements into practical, business-oriented solutions.

Core areas of expertise:
  1. Information Security Governance & Strategy
  2. ISO 27001 implementation and audit readiness
  3. Risk Assessment & Risk Treatment Planning
  4. Third-Party Risk Management (TPRM)
  5. Security Policies & Procedures development
  6. Regulatory compliance (GDPR, NIS2, DORA)
  7. Internal audits & control frameworks
  8. Business Continuity & Incident Response governance
  9. Security awareness programs
I have experience acting as vCISO / external Information Security Officer, supporting organizations in regulated environments and growing companies that need to structure their security posture from a governance perspective.

My approach combines strategic vision with hands-on execution, ensuring security is aligned with business objectives, scalable, and audit-ready.


Why Me:
★ Quick Response
★ On Time Delivery
★ Detailed Reporting
★ 100% Satisfaction Guarantee

Experience

Professional experience5 - 10 years
Freelancer since2018

Languages

EnglishFluentSpanishNative speaker

Project history

Information Security Officer | Cybersecurity Consultant

Aernnova Aerospace

Industry & Mechanical Engineering

5000-10.000 team member

Collaboration in customer audits, providing evidence, performing gap analysis against standards such as ISO 27001 and NIST framework.
Support in the Cyber Essentials recertification process, coordinating tasks with IT teams, reviewing documentation and technical controls.
Working with other departments to ensure that security measures are aligned with the needs of the organization.
Coordination of training and awareness in cybersecurity or information security

GRC Consultant

Capgemini

Banking & Financial Services

1000-5000 team member

IT Helpdesk Support

Gentaur Genprice Group


Web Developer | Analyst

Calmo Agency

Certificates

IBM Cybersecurity Analyst

IBM

2024

ISO/IEC 27001 Information Security Associate

Skillfront

2024


Contact form

Log in to get in touch

You need to be logged in to use the contact form.

Sign upLog in