Skip to main content
Ostosmind UserOU
Looking for a job

Ostosmind User

@ostosminduser

I build audit-ready cybersecurity GRC, ISO 27001, SOC 2, NIS2, and AI governance programmes.

Spain
Message

What I'm looking for

I'm looking to help SaaS, healthcare, technology, and regulated organisations turn cybersecurity and regulatory requirements into practical, audit-ready security and resilience programmes.

I lead SpectraSec, where I build cybersecurity GRC and assurance programmes for SaaS, healthcare, technology, and regulated organisations across Europe.

I guide organisations through ISO/IEC 27001 readiness, implementation, internal audit, certification preparation, and SOC 2 Type I/II readiness. My work turns regulatory requirements into practical controls, traceable evidence, remediation roadmaps, and executive reporting.

I develop NIS2, GDPR, operational resilience, supplier-risk, and AI governance frameworks aligned with the EU AI Act and ISO/IEC 42001. I also designed awareness initiatives that contributed to a reported 40% reduction in phishing exposure.

Alongside consulting, I contribute independent cybersecurity and digital-innovation expertise to the European Commission and GLG, and mentor founders on secure, compliant growth.

Experience

Work history, roles, and key accomplishments

Red de Mentores de Madrid Emprende logoRE
Current

Mentor at Madrid Emprende | Cybersecurity & Governance Advisor

Jan 2026 - Present (8 months)

Mentor within the Madrid Emprende network, supporting founders and growing companies in building secure, compliant and scalable operations.

• Advise founders on cybersecurity governance, risk management and security strategy.

• Support readiness discussions around ISO 27001, NIS2 and GDPR, translating regulatory requirements into practical business actions.

• Help growing companies integrate

GLG logoGL
Current

GLG Network Member | Cybersecurity GRC Expert

Sep 2025 - Present (1 year)

ndependent GLG Network Member providing subject-matter expertise in Cybersecurity Governance, Risk & Compliance (GRC), with a focus on ISO/IEC 27001, NIS2, SOC 2, third-party risk management, operational resilience, AI governance, the EU AI Act and ISO/IEC 42001.

Contributes independent industry perspectives on cybersecurity governance, regulatory compliance, risk management, security assurance

European Commission logoEC
Current

Subject Matter Expert (SME) & Evaluator | Cybersecurity & Digital Innovation

Jul 2025 - Present (1 year 2 months)

Independent Subject Matter Expert and Evaluator supporting European cybersecurity and digital innovation programmes, including Horizon Europe – Cluster 3 (Civil Security for Society) and the Digital Europe Programme.

• Evaluate cybersecurity, digital transformation and innovation proposals submitted to European funding programmes.
• Assess technical quality, implementation feasibility, impact, r

Accurate Global INC. logoAI
Current

SOC 2 Auditor / Readiness Consultant

Jun 2024 - Present (2 years 3 months)

Supporting organisations through SOC 2 Type I/II and ISO 27001 readiness, with focus on security governance, operational controls, evidence management and audit preparation.

• Designed governance models and audit-ready documentation aligned with the AICPA Trust Services Criteria (TSC).
• Built evidence and control-traceability frameworks to strengthen audit readiness and support sustainable comp

SpectraSec logoSP
Current

Founder & Principal Consultant | Cybersecurity GRC & AI Governance

Jan 2024 - Present (2 years 8 months)

Cybersecurity GRC and assurance practice supporting SaaS, technology, healthcare and regulated organisations across Europe.

• Led end-to-end ISO/IEC 27001 readiness and implementation programmes, covering risk assessment, Statement of Applicability (SoA), control design, evidence management, internal audit and certification preparation.
• Supported a cloud-first SaaS organisation through ISO 270

Cámara de Comercio de Granada logoCG

Mentor | Cybersecurity & Governance

Nov 2025 - May 2026 (6 months)

Mentored startups participating in the Despega programme, advising founders on cybersecurity, governance and regulatory readiness.
• Helped early-stage companies identify security and compliance priorities appropriate to their growth stage.
• Advised on practical foundations for cybersecurity governance, risk management and regulatory readiness.

Kymatio - Activate Human Firewalls logoKF

Social Engineering Specialist

Mar 2025 - Mar 2025 (0 months)

Supported social engineering and human risk assessment programmes, helping organisations identify and reduce security exposure related to employee behaviour.

• Analysed phishing, vishing and employee security behaviour to identify organisational human-risk exposure.

• Translated assessment findings into targeted awareness and remediation actions in collaboration with cybersecurity teams and st

SMARTFENSE logoSM

Channel Sales Manager | Cybersecurity

Nov 2023 - Oct 2024 (11 months)

ed channel development and strategic partnerships for a cybersecurity awareness and human-risk platform across Spain and Latin America.

• Developed relationships with partners and enterprise customers to expand cybersecurity solutions across regulated and technology-driven organisations.

• Supported partner enablement, enterprise sales and go-to-market execution, connecting customer security r

PANAMASIA Financial Services Limited logoPL

Business Development LATAM / Strategic partner

Sep 2022 - Oct 2023 (1 year 1 month)

Led partnership strategy and commercial expansion across Latin America.

• Increased profitability by 21% within six months by optimising commercial development and strategic account activities.
• Expanded market share by 3% through strategic positioning and new-client acquisition.
• Negotiated long-term agreements with regional key accounts to support sustainable market expansion.

Expandeers Global Network (Alemania) logoEA

Business development in Latin America/ Strategic Partner

Nov 2018 - May 2022 (3 years 6 months)

Supported international companies entering and expanding across Latin American markets through market development, partnerships and strategic account management.

• Increased sales by 20% through targeted market-development and commercial initiatives.
• Expanded market reach by 30% by identifying and developing new market opportunities.
• Led key-account development, solution selling and market-e

Glacier International Depository Bank (GIDBA) logoGG

Business representative European Union and Asia

Oct 2017 - Oct 2018 (1 year)

Supported international business development and market-expansion activities across European and Asian markets.

• Identified and developed new business opportunities across international markets.
• Managed relationships with commercial stakeholders and prospective partners.
• Supported strategic business-development initiatives across multiple regions.

Self Employed logoSE

| Business Consultant | Growth Opportunities | Pharma

Mar 2014 - Aug 2017 (3 years 5 months)

Provided independent consulting services to pharmaceutical and healthcare organisations, supporting business development, operational improvement, regulatory requirements and market expansion.

• Developed policies and operating procedures supporting regulatory and business requirements.
• Conducted business and operational risk assessments to identify improvement opportunities and support decisi

Grupo Mistral logoGM

Category Management Manager OTC

Jan 2013 - Aug 2014 (1 year 7 months)

- Directed market research initiatives to analyze OTC market needs and preferences.
- Created and implemented competitive pricing strategies for new sub-categories, resulting in a X% increase in sales.
- Established and nurtured partnerships with key category collaborators, leading to a X% growth in market share.
- Conducted market research for OTC products
- Developed pricing strategies
- Cultiv

Corporación FECH- División Insumo Médicos logoCM

Jr. Sales Manager

Jan 2011 - Jan 2013 (2 years)

Increased Sales and Efficiency, and Improved Customer Retention in IT Sales and Solution Selling

As a key account manager in the IT sales industry, I spearheaded strategic initiatives that resulted in a 25% boost in product sales by focusing on medical device marketing. Enhancing the sales team's efficiency by 15%, through targeted training and performance monitoring, led to a 10% increase in tot

Farmatodo logoFA

Senior Pharmacist

Jan 2010 - Jan 2011 (1 year)

Directed High-Impact Sales and Market Strategies in the Pharmacy Sector

Led the development of effective sales strategies focused on maximizing commercial opportunities and implementing targeted promotions across the pharmacy segment. Leveraged a blend of pharmacological insight and sales expertise to identify high-value product opportunities, driving a 20% increase in Over-the-Counter (OTC) prod

Education

Degrees, certifications, and relevant coursework

AT

AttackIQ

Strategic Cybersecurity Management

Issued Feb 2026 · Expired Feb 2026

LI

LinkedIn

Strategic Project Risk Management

Issued Jan 2026

TS

The Valley Business & Tech School

Cybersecurity expert

2023 - 2023

Advanced cybersecurity training focused on enterprise and regulated environments, with a strong emphasis on practical security operations and audit readiness.

Coverage included:

Operating systems security (Windows, Linux, macOS)

Active Directory and infrastructure hardening

Security evaluation and firmware analysis

Training areas:

Ethical hacking and penetration testing

Malware analysis and

UP

University of Pennsylvania

Specialized Program - Business Analytics, Procesamiento de datos

2021 - 2021

Specialized programme in business analytics for strategic decision-making, covering data visualisation, statistical analysis, forecasting, process optimisation and performance measurement.

UC

Universidad Rey Juan Carlos

Master of Business Administration (MBA), Management and Leadership

2015 - 2017

MBA focused on business strategy, management, leadership, decision-making, operations and organisational development. This business foundation supports my subsequent work across technology, cybersecurity governance and regulated industries.

CS

Cerem Business School

Master of Marketing, Marketing/Gestión de marketing, general

2015 - 2016

During my master's program, I have had the opportunity to develop fundamental skills in strategic marketing. My mastery of the art of data analysis has become an invaluable resource in my skill set. By immersing myself in the realm of data analysis, I have become adept at using advanced tools to extract valuable insights into consumer behavior, market trends, and growing competition. By unraveling

CB

Condor Blanco

Business Coach, Sales, sales promotion and marketing activities

2014 - 2014

As a business coach, my focus on effective communication, leadership, and strategic thinking is complemented by key areas such as auditing, ISO, risk, controls, compliance, risk analysis, security incidents, vulnerability assessment, and best practices.

Using effective communication skills, I actively listen to my clients and use powerful questions to help them reflect on their business challenge

UV

Universidad Metropolitana (VE)

Pharmaceutical Management Diploma, Commercial

2012 - 2013

Diploma focused on pharmaceutical management, quality, operations, financial management, leadership and commercial decision-making within regulated healthcare environments.

UV

Universidad Metropolitana (VE)

Trade Marketing, Marketing

2013 - 2013

With a diploma in trade marketing, I have honed essential skills in data analysis, promotion design and execution, and effective negotiation.
In today's digital landscape, I understand the critical importance of cybersecurity in marketing activities. By integrating cybersecurity practices into marketing campaigns and strategies, I ensure the protection of customer data, safeguarding against potent

UM

Universidad 'Santa María'

Pharmacist, Health

2005 - 2010

Degree in Pharmacy covering pharmaceutical sciences, healthcare, laboratory practices, quality, patient safety and regulated healthcare operations.

Tech stack

Software and tools used professionally

Get matched with your dream remote job

Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!

Sign up
Himalayas profile for an example user named Frankie Sullivan