Looking for a job

María Luisa Redondo

@maraluisaredondo

Message

Global CISO at TK Elevator who established AI risk governance covering 100% of GenAI initiatives.

Spain

Message

At TK Elevator, I established enterprise-wide AI risk governance covering 100% of GenAI initiatives. I also reduced the external attack surface by 40% in 12 months through automated exposure management.

At HORSE, I built the global cybersecurity function for a newly created automotive joint venture. I increased cybersecurity maturity by 35% and achieved ISO/SAE 21434 certification.

At DEVO, I scaled global cloud-native security operations and improved threat detection effectiveness by 45%. I also reduced false positives by 30% through SOAR automation and incident response playbooks.

Across industrial, automotive, and financial services organizations, I’ve built cybersecurity capabilities and advised executive teams on cyber resilience, regulatory compliance, and digital transformation. My work spans security leadership, AI governance, and the protection of critical operations.

Experience

Work history, roles, and key accomplishments

Current

Global Chief Information Security Officer (CISO)

Current

TK Elevator

Sep 2025 - Present (1 year)

Built and led a 40-person global cybersecurity organization, defining enterprise strategy and governance across 50,000+ employees in 100+ countries. Established enterprise-wide AI risk governance and reduced external attack surface by 40% in 12 months.

Cybersecurity Strategy AI Governance EASM SOC OT Security PAM Budget Management Executive Reporting

Chief Information Security Officer (CISO)

HORSE

Nov 2023 - Sep 2025 (1 year 10 months)

Built and led the global cybersecurity function for a newly created automotive joint venture, managing an €8M+ budget and aligning cyber risk with business growth. Increased cybersecurity maturity by 35% and achieved ISO/SAE 21434 certification.

Cybersecurity Governance NIST CSF ISO 21434 OT Security Vendor Optimization Cyber Insurance PKI IAM Cloud Security DevSecOps

Security Operations Director

DEVO

Jul 2022 - Nov 2023 (1 year 4 months)

Scaled a global SOC protecting cloud environments with 50+ TB daily log ingestion, improving threat detection effectiveness by 45% and reducing false positives by 30% through SOAR automation.

SOC SOAR Incident Response Threat Hunting Vulnerability Management DevSecOps AWS Azure GCP KPI Frameworks

Technical Security Center Senior Lead

JTI (Japan Tobacco International)

Aug 2018 - Jul 2022 (3 years 11 months)

Standardized technical security controls across 120+ markets, achieving 100% compliance coverage for 200+ business-critical systems. Led security architecture for global AWS and Azure transformation programs.

Security Architecture Cloud Security AWS Azure Firewalls WAF IPS VPN Vulnerability Management Security Monitoring

Security Lead

Accenture

Mar 2017 - Aug 2018 (1 year 5 months)

Designed cyber defense architectures and security transformation roadmaps for Fortune 500 industrial clients, improving security maturity by an average of 25%. Led security assessments and remediation programs across multiple multinational accounts.

Cyber Defense Security Architecture Security Assessments remediation IT transformation

Security Lead - IT Risk & Assurance

May 2016 - Feb 2017 (9 months)

Secured large-scale digital banking and cloud transformation programs, ensuring 100% compliance with Spanish and UK privacy regulations. Designed secure IaaS/PaaS environments protecting millions of customer records.

Security Architecture Cloud Security IT Risk Regulatory Compliance IaaS PaaS Digital Banking

Security Lead - IT Risk & Assurance

PwC

Feb 2012 - May 2016 (4 years 3 months)

Directed cybersecurity, IT risk, and business continuity engagements for 60% of top financial institutions in Iberia. Reduced digital fraud risk by 20% for insurers and delivered 30+ security projects.

Cybersecurity IT Risk IAM Business Continuity SIEM Threat Intelligence SOC SOAR Fraud Analytics SAP GRC

IT Associate

KPMG Advisory

May 2011 - Feb 2012 (9 months)

Supported risk governance and PMO activities for Telefónica's global SAP HCM rollout, coordinating international stakeholders across Europe and LATAM.

IT Risk PMO SAP HCM Stakeholder Coordination

SAP HCM Solution Architect / Project Manager

EMT

Oct 2005 - May 2011 (5 years 7 months)

Built strong SAP architecture expertise across HCM, FI, and SD while ensuring 100% payroll continuity for 8,000+ employees. Initiated specialization in cybersecurity through SAP IAM and SAP GRC.

SAP HCM SAP FI SAP SD IAM GRC Project Management Enterprise Architecture

SAP Solution Architect

CSC (Computer Science Corporation)

Dec 2004 - Oct 2005 (10 months)

Led SAP integration and optimization initiatives, improving system performance and supporting large-scale transformation projects.

SAP Solutions Architect Systems Integrations Data Migration Performance Optimization

SAP Consultant

Northgate Arinso

Jun 2003 - Dec 2004 (1 year 6 months)

Implemented SAP HCM solutions and security controls for multinational clients, supporting secure management of sensitive employee data.

SAP HCM Security Controls Identity Management Access Control Data Protection

Education

Degrees, certifications, and relevant coursework

Universidad de Murcia

Master's degree, Malware Analysis, Reverse Engineering and Bug Hunting

2022 - 2023

Completed a Master's degree in Malware Analysis, Reverse Engineering and Bug Hunting, focusing on advanced malware analysis and exploitation techniques.