Open to opportunities

lara sanz

@larasanz

Message

I build scalable cybersecurity programs for startups, enabling IPO-ready growth.

Spain

Message

What I'm looking for

I’m looking for builder roles in startups and scale-ups where security is an enabler. I want to design security and compliance foundations, lead SecOps/IR/Pentesting, and connect security to business operations without slowing growth.

I’m a cybersecurity leader with 15+ years of experience, specialising in building and scaling security functions in high-growth environments. I design security, compliance, and operational foundations that enable companies to grow with clarity—embedding security into business workflows without slowing the business.

I’ve led SecOps, Incident Response and Pentesting teams, and owned end-to-end compliance programs (SOC2, PCI DSS, SOX, HITRUST) with consistent zero findings across audit cycles. At Flywire, I built the cybersecurity function from early-stage to IPO-ready as the company scaled to Nasdaq-listed status, while balancing security maturity with business velocity.

I connect security, business and operations into scalable systems, bringing a strategic and systems-first approach that improves operational efficiency and response time. Currently, I’m looking for builder roles in startups and scale-ups where security is seen as an enabler, not a blocker.

Experience

Work history, roles, and key accomplishments

Current

Compliance & Security Lead

Current

Desafío Zero

Oct 2025 - Present (6 months)

Partnered with founders to define security/compliance priorities and KPIs, then designed operational frameworks to execute SOC 2 Type II, PCI DSS, SOX, and HITRUST programs with GDPR alignment. Introduced AI-driven automation to improve operational efficiency and execution at scale.