Local Information Security Officer at Grupo Santander - Produban
Madrid Area, Spain
Local Information Security Officer at Grupo Santander - Produban
Madrid Area, Spain
IT Security Specialist with notable experience in both organizational and technological aspects of this IT field. Project management and consulting skills acquired in several organizations belonging to the Finance and IT sectors.
Ability to defend proposals and coordinate projects.
Social skills with customers.
Ability to speak to technical and non-technical audiences.
Ability to work in a team.
Experience with CobiT, ISO17799 and SOX.
Knowledge about risk assessments and ITIL.
Experience with security products (ISS, Foundstone, F5, Cisco, eEye, Sanctum, McAfee) and pen-testing tools.
Exploit development and publishing at Bugtraq.
Programming in Java, C, Perl, Symbian.
(Public Company; 10,001 or more employees; Banking industry)
September 2007 — Present (1 year 2 months)
(Privately Held; 10,001 or more employees; Banking industry)
November 2005 — Present (3 years)
Project Manager at Corporate Security Department.
Relevant projects and functions:
- IT Security Plan in UK, Peru and Portugal.
- IT Governance Body (based on ISO17799/CobiT).
- IT Security projects management.
- Experience with Sarbanes-Oxley compliance.
(Privately Held; 51-200 employees; Information Technology and Services industry)
November 2004 — November 2005 (1 year 1 month)
IT Security Consultant at Intrusion Prevention Department.
Relevant projects and functions:
- Presales Consultant in Intrusion Prevention Division.
- Design and deployment of security technology solutions.
- Comparative analysis of security products.
- Technical and executive report development.
- Security articles in professional magazines
- Speaker at IT Security conferences.
(Public Company; 501-1000 employees; Information Technology and Services industry)
June 2004 — November 2004 (6 months)
Third-party pen-tester at a financial corporation.
Relevant activities:
- Pen-testing and Java source code analysis.
- Contribution to SecurityFocus, OWASP, WASC.
(Privately Held; 10,001 or more employees; Telecommunications industry)
October 2002 — September 2003 (1 year)
Design and deployment of IT Security solutions and performance of forensic analysis.
Bachelor, Computer Science, 2000 — 2006
Bachelor, Telecommunications, 1999 — 2004
1999 — 2004