antonio rubio redondo

At Govertis, I manage GRC activities within a Security Technical Office, supporting ISO 27001 and ENS certifications. I lead full-cycle internal audits across subsidiaries, serve as the primary contact for external audits, and integrate business continuity into audit and operational controls.

Previously at INYCOM, I delivered more than 20 ENS security assessments, led internal audits as Lead Auditor, and directed Security Technical Office projects across multiple organizations. At EY, I led SWIFT security assessments, supported ISO 27001 compliance processes, conducted banking access-control audits, and developed RPA solutions using UiPath and Blue Prism.

I translate Spanish and EU regulatory requirements—including ENS, MAGERIT, NIS2, and ISO 27001—into practical security controls. I use RSA Archer to manage the full risk lifecycle and support distributed teams through certification, audit, and resilience work.