Open to opportunities

Fernando Gabriel Barceló Tomás

@fbarcelo

Message

Executive CISO and Security Architect combining legal-grade GRC with cloud-native security.

Argentina

Message

What I'm looking for

I’m looking to lead security strategy for a high-growth, regulated enterprise—owning enterprise governance, continuous compliance automation, and zero-trust technical architecture, with C-suite alignment and measurable risk reduction.

I’m a Hybrid CISO & Security Architect with 20+ years of experience integrating complex legal frameworks and high-level technical architecture. I lead secure enterprise governance and regulatory automation, with a focus on zero-trust engineering, DevSecOps, and AI-driven GRC.

Most recently, I founded CentinelaSaaS, orchestrating an AI-driven synthetic workforce to accelerate secure SDLC delivery and building an all-in-one cloud SaaS platform automating continuous compliance across 19 regulatory frameworks. Previously, as CISO at Minder S.A., I established and architected an ISMS from scratch, achieved ISO 27001 certification in 18 months, cleared the initial certification audit on the first attempt with 100% compliance, and delivered a 40% reduction in operational risk profile through critical digital signature infrastructure mitigations.

Experience

Work history, roles, and key accomplishments

Current

Founder & Product Architect

Current

CentinelaSaaS

Jun 2025 - Present (1 year)

Built an AI-agent driven synthetic workforce to accelerate secure SDLC delivery and designed an all-in-one cloud SaaS that automates continuous compliance across 19 regulatory frameworks. Architected a zero-trust microservices platform with RBAC and row-level security and developed a Monte Carlo risk assessment engine (10,000+ iterations).

AI Agents Secure SDLC fastAPI PostgreSQL Redis RBAC Zero Trust Architecture

Chief Information Security Officer

Minder S.A.

Nov 2021 - Jun 2025 (3 years 7 months)

Established the company’s ISMS from scratch and led the program to achieve ISO/IEC 27001 certification within 18 months. Delivered first-time certification with 100% compliance, reduced operational risk by 40% through digital signature infrastructure mitigations, and drove ongoing security governance and audit execution.

ISMS ISO 27001 Information Security Governance Audit Management Risk Assessment Security Compliance

Security & Governance Architect

PwC Argentina

Sep 2019 - May 2023 (3 years 8 months)

Led the Application Readiness Review team, directing architects and risk analysts across PwC’s global digital network. Reviewed 30+ technical architectures and data flows weekly to validate enterprise cloud security designs, mapped controls to NIST CSF to reduce turnaround time and eliminate rework.

Cloud Security Architecture NIST CSF Security Governance Application Readiness Team Leadership Stakeholder Management Audit Support

IT Governance Project Manager

First Data Corporation

Jan 2017 - Jan 2018 (1 year)

Managed critical financial IT compliance audits, achieving a 100% success rate in remediation tracking. Coordinated governance activities to ensure timely closure of audit remediation across key financial IT controls.

IT Compliance Audit Remediation Tracking IT Governance Project Management Regulatory Compliance Risk Management Audit Coordination Controls Testing Process Improvement

e-Compliance & IGM Coordinator

Novartis

Jan 2013 - Jan 2017 (4 years)

Validated high-risk GxP software systems against global healthcare inspections and acted as an SAP superuser. Coordinated e-Compliance and IGM activities to support inspection readiness and compliant software operations.

GxP Compliance Validation SAP IGM Coordination Audit Preparation Data Integrity Quality Management Document Control

Project Manager & Technical Lead

IBM

Jan 2006 - Jan 2013 (7 years)

Re-engineered patch management for 8,000+ global servers, successfully clearing a multi-year backlog on 300 legacy systems. Led technical service execution to improve remediation outcomes and operational stability across legacy infrastructure.

Patch Management Vulnerability Management Server Operations Change Management Automation Support ITIL Operational Stabilization Program Delivery

Linux & Enterprise Accounts

Actualtech

Jan 1999 - Jan 2006 (7 years)

Managed Linux environments and enterprise accounts, achieving 100% retention on USD 1.2M contract value. Provided ongoing technical support and service delivery to maintain long-term customer relationships.