Open to opportunities

Elisa Lozano

@elisalozano

Message

I build cybersecurity culture programmes that make security practical, accessible and resilient for people.

Spain

Message

What I'm looking for

I'm looking to build practical cybersecurity culture, awareness and GRC programmes that make technology and security easier to understand for diverse audiences.

At Stratesys, I manage and support cybersecurity culture projects, designing tailored programmes that combine training, policies, communication, behavioural assessments, social engineering exercises and awareness campaigns. Previously at TK Elevator, I managed the global cybersecurity awareness and training programme across geographies and business units while contributing to ISO 27001, NIST, GDPR, privacy and compliance initiatives.

I've also led awareness and GRC projects at A2SECURE and S2 Grupo, developed accessible cybersecurity content for INCIBE, and supported cybersecurity pre-sales at Telefónica-ElevenPaths. My work is rooted in translating technical and regulatory topics into practical content that helps non-technical audiences become more resilient in their digital lives.

Experience

Work history, roles, and key accomplishments

Current

Manager – GRC & Culture

Current

Stratesys

Jan 2025 - Present (1 year 7 months)

Manages and supports the cybersecurity culture team, coordinating priorities, projects, and client needs. Designs tailored security culture programmes combining training, policies, communication, and awareness campaigns.

Cybersecurity Culture GRC Training Project Communication Project Management Social Engineering

Freelance – IT Security Content Creator

INCIBE

Jan 2024 - Jan 2026 (2 years)

Developed training content for INCIBE's Entrepreneurship and Cybersecurity programme, covering cybersecurity, data protection, and business operations. Translated technical topics into practical content for non-technical audiences.

Content Creation Cybersecurity Data Protection Training entrepreneurship

IT Security Awareness & Communication Manager

TK Elevator

Jan 2023 - Jan 2025 (2 years)

Managed the global cybersecurity awareness and training programme across all geographies and business units, from strategy to measurement. Contributed to GRC, privacy, and compliance initiatives related to ISO 27001, NIST, and GDPR.

Training GRC ISO 27001 NIST GDPR Privacy Compliance

Head of Awareness Department & GRC Consultant

A2SECURE

Jan 2022 - Jan 2023 (1 year)

Led the cybersecurity awareness department, coordinating awareness initiatives and projects. Managed Technical Cybersecurity Office projects, combining awareness with broader cybersecurity governance and project management.

GRC Project Management Governance Team Leadership

GRC & Awareness International Consultant

S2 Grupo

Jan 2020 - Jan 2022 (2 years)

Managed international cybersecurity projects focused on GRC and security awareness, coordinating activities, deliverables, and client needs throughout the project lifecycle.

GRC Security Awareness Project Management Client Management

Cybersecurity Pre-Sales Consultant

Telefónica - ElevenPaths

Jan 2019 - Jan 2020 (1 year)

Worked on cybersecurity pre-sales, managing RFPs and preparing technical proposals focused on GRC and security awareness services. Analysed requirements and prepared responses for international and public-sector tenders.

Pre Sales RFP GRC Security Awareness Proposal Management Tender Management

Training Department Intern

Action Against Hunger

Jan 2018 - Dec 2018 (11 months)

Supported the training team with eLearning platforms and internal learning activities. Created IT and physical security training content for expatriates and field project employees.

Training E Learning Content Creation Security Awareness

Communication Department Intern

World Design Organization

Jan 2016 - Dec 2016 (11 months)

Supported the communications team with internal communication activities and external press materials. Helped create communication strategies and draft content for different audiences and channels.

Content Creation Press Materials Strategy