Everis Aerospace, Defense and Security
mayo de 2018 - diciembre de 2019 (1 año y 7 meses)
Barcelona, España
Information Security Training Program implementation and execution.
Software Development Life Cycle (SDLC) implementation and execution.
Secure Development training.
IT Risk Analysis: Policy creation, procedures, tools, risk analysis execution...
Vulnerability Analysis environment implementation using OpenVAS.
PCI-DSS, PSD2 compliance regulations management.
EBA recommendations implementations on CLOUD external providers and Risk Analysis methodology
Asset Management support.
External providers periodical reviews.
Policies, procedures and standards creation, management, and update.
Client support.
Information Security side contract's review.
Self-assessment program (TARGET2, SWIFT, VISA Pin Security program...)
Security and IT Risk committee's and follow-up meetings.
Project Management and organization.
Reports and monthly security indicators creation.