Description

More than 14 years of employment at IT company SAP, where I was successful as a Lead for ISMS / ISO 27001 certification for all SAP Products in Development, as well as as a Project/program manager and providing support to management on processes (Owner Incident Response process for all SAP Infrastructure), Governance, reporting and compliance topics.

My last role was as External at Siemens implementing NIS 2 Directive (EU) 2022/255.

I am a certified ISO/IEC 27001:2022 Lead Auditor and ITIL.

Industry field of expertise

Languages

Spanish
Native or bilingual
Catalan
Native or bilingual
English
Fluent
German
Fluent

Workplace preferences

Can work on-site

Barcelona (up to 50km)

SIEMENS Digital Industries Software,
Freelance Consultant NIS 2 compliance expert
DIGITAL AND IT
April 2025 - August 2025 (4 months)
Germany
• Implemented comprehensive NIS 2 compliance programs through detailed gap analyses against ISO 27001, Siemens policies and controls
• Developed measurable success criteria for sustainable compliance structures
• Analyzed complex supply chains for systematic assessment of third-party risks
NIS2 ISO 27001 ISO27001 Project Management
SAP SE,
Expert Product Security
DIGITAL AND IT
January 2023 - March 2025 (2 years and 2 months)
Walldorf, Germany
• Responsible for ISMS, ISO/IEC 27001:2022 implementation for SAP Product Development (Scope +20 Business Lines, 5.000+ Developers)
• Co-ordinated transition from ISO 27001:2013 to 2022 with 95%+ compliance rate Security Lead for Cloud Security Office Hours: (Hyperscalers operations and security compliance) Manager Shift Left AI Project for Product Security
ISO 27001 ISO 27005 ISO27001 Project Management
SAP Global Security (SAP SGS), Security Engineering,
Cyber Security Design Expert
August 2021 - December 2022 (1 year and 4 months)
Walldorf, Germany
• Developed strategic security policies, roadmaps and their implementation in direct reporting line to the Head of Security Engineering
• Optimized governance structures and reporting processes by 40%
• Implemented third-party security tools programs for global SAP infrastructure