Open to opportunities

Javier Godia Arbiol

@javiergodiaarbiol

Message

GRC consultant specializing in cybersecurity governance, regulatory compliance, and ISO/IEC 27001 readiness.

Spain

Message

What I'm looking for

I’m looking for a cybersecurity GRC role where I can drive ISO/IEC 27001/ENS compliance, own risk assessments and audit evidence, and work with teams that value practical security outcomes—supporting certification transitions and strengthening governance through clear controls.

I’m a GRC Consultant specializing in cybersecurity governance and regulatory compliance, bringing both legal-and-policy grounding and practical security operations experience. I support organizations with risk assessment, control implementation, audit and certification readiness across ISO/IEC 27001, ENS, and PCI DSS (and DORA), helping teams translate requirements into workable programs.

I also bring a SOC/CSIRT perspective—investigating incidents, analyzing log data, and escalating validated security events—so my GRC work stays connected to real-world security outcomes. Across my roles, I’ve prepared audit evidence, supported internal and external audits, conducted ISO/IEC 27001 and ENS audits, guided certification transitions, and contributed to training and awareness materials to strengthen compliance in regulated environments.

Experience

Work history, roles, and key accomplishments

Senior GRC Consultant

Govertis (Telefónica Tech)

Sep 2025 - Mar 2026 (6 months)

Supported ENS compliance projects in public-sector regulated environments, advising clients on security governance and regulatory requirements. Prepared audit evidence and assisted internal/external audits, including risk assessment and ENS/ISO control implementation and certification readiness.

ENS PCI DSS DORA Risk Assessment Audit Evidence Internal Audit Stakeholder Management

Cybersecurity Consultant

Quantras Consulting

Mar 2025 - Sep 2025 (6 months)

Implemented and supported ENS compliance and ISO/IEC 27001, performing internal audits to drive continuous improvement and regulatory alignment. Conducted vulnerability assessment with Nessus and Nmap and guided clients through external certification transitions.

ENS ISO 27001 Nessus Nmap Vulnerability Assessment Microsoft Defender Crowdstrike Internal Audit

Cybersecurity Analyst (SOC)

Accenture

Nov 2022 - Jul 2023 (8 months)

Monitored and analyzed log data, network traffic, and real-time alerts from security technologies for EU client environments. Investigated attacks, escalated validated incidents, and advised clients on security issues in both verbal and written formats.

Log Analysis Security Technologies Escalations

Cybersecurity Analyst (CSIRT)

Capgemini

Jan 2022 - Nov 2022 (10 months)

Managed and investigated alerts from multiple sources using SIEM (McAfee), SAT INET, and CrowdStrike Falcon, supporting incident actions and escalation to other departments. Reported new vulnerabilities and threats by compiling and verifying IOCs to support organizational defense systems.

SIEM SAT INET Escalations

Legal Administrative Assistant

Estudios y Proyectos ARCE, S. L

Jan 2019 - Jan 2021 (2 years)

Compiled and analyzed municipal regulations from official gazettes and prepared written allegations when regulations did not comply with applicable law. Produced reports based on collected regulations as part of a Telefónica-related project.

Municipal Regulation Analysis Legal Drafting Compliance Documentation Report Writing Administrative Support

Administrative Consultant

Sii Concatel

Jan 2018 - Present (8 years 5 months)

Supported implementation of a tool to monitor and alert changes in the status of public procurement records. Maintained updated record data, prepared status reports, and resolved legal queries related to contracting procedures.

Public Procurement Monitoring Status Reporting Legal Query Resolution

Education

Degrees, certifications, and relevant coursework

Founderz

Master’s in Artificial Intelligence and Innovation, Artificial Intelligence and Innovation

2024 - 2026

Online Master’s in Artificial Intelligence and Innovation with training in artificial intelligence, automation, AI governance, and the EU AI Act, completed from Dec 2024 to May 2026.