
Ostosmind User
@ostosminduser
I build audit-ready cybersecurity GRC, ISO 27001, SOC 2, NIS2, and AI governance programmes.
What I'm looking for
I lead SpectraSec, where I build cybersecurity GRC and assurance programmes for SaaS, healthcare, technology, and regulated organisations across Europe.
I guide organisations through ISO/IEC 27001 readiness, implementation, internal audit, certification preparation, and SOC 2 Type I/II readiness. My work turns regulatory requirements into practical controls, traceable evidence, remediation roadmaps, and executive reporting.
I develop NIS2, GDPR, operational resilience, supplier-risk, and AI governance frameworks aligned with the EU AI Act and ISO/IEC 42001. I also designed awareness initiatives that contributed to a reported 40% reduction in phishing exposure.
Alongside consulting, I contribute independent cybersecurity and digital-innovation expertise to the European Commission and GLG, and mentor founders on secure, compliant growth.
Experience
Work history, roles, and key accomplishments
Mentor at Madrid Emprende | Cybersecurity & Governance Advisor
Jan 2026 - Present (8 months)
Mentor within the Madrid Emprende network, supporting founders and growing companies in building secure, compliant and scalable operations.
• Advise founders on cybersecurity governance, risk management and security strategy.
• Support readiness discussions around ISO 27001, NIS2 and GDPR, translating regulatory requirements into practical business actions.
• Help growing companies integrate
ndependent GLG Network Member providing subject-matter expertise in Cybersecurity Governance, Risk & Compliance (GRC), with a focus on ISO/IEC 27001, NIS2, SOC 2, third-party risk management, operational resilience, AI governance, the EU AI Act and ISO/IEC 42001.
Contributes independent industry perspectives on cybersecurity governance, regulatory compliance, risk management, security assurance
Subject Matter Expert (SME) & Evaluator | Cybersecurity & Digital Innovation
Jul 2025 - Present (1 year 2 months)
Independent Subject Matter Expert and Evaluator supporting European cybersecurity and digital innovation programmes, including Horizon Europe – Cluster 3 (Civil Security for Society) and the Digital Europe Programme.
• Evaluate cybersecurity, digital transformation and innovation proposals submitted to European funding programmes.
• Assess technical quality, implementation feasibility, impact, r
Supporting organisations through SOC 2 Type I/II and ISO 27001 readiness, with focus on security governance, operational controls, evidence management and audit preparation.
• Designed governance models and audit-ready documentation aligned with the AICPA Trust Services Criteria (TSC).
• Built evidence and control-traceability frameworks to strengthen audit readiness and support sustainable comp
Founder & Principal Consultant | Cybersecurity GRC & AI Governance
Jan 2024 - Present (2 years 8 months)
Cybersecurity GRC and assurance practice supporting SaaS, technology, healthcare and regulated organisations across Europe.
• Led end-to-end ISO/IEC 27001 readiness and implementation programmes, covering risk assessment, Statement of Applicability (SoA), control design, evidence management, internal audit and certification preparation.
• Supported a cloud-first SaaS organisation through ISO 270
Mentored startups participating in the Despega programme, advising founders on cybersecurity, governance and regulatory readiness.
• Helped early-stage companies identify security and compliance priorities appropriate to their growth stage.
• Advised on practical foundations for cybersecurity governance, risk management and regulatory readiness.
Supported social engineering and human risk assessment programmes, helping organisations identify and reduce security exposure related to employee behaviour.
• Analysed phishing, vishing and employee security behaviour to identify organisational human-risk exposure.
• Translated assessment findings into targeted awareness and remediation actions in collaboration with cybersecurity teams and st
ed channel development and strategic partnerships for a cybersecurity awareness and human-risk platform across Spain and Latin America.
• Developed relationships with partners and enterprise customers to expand cybersecurity solutions across regulated and technology-driven organisations.
• Supported partner enablement, enterprise sales and go-to-market execution, connecting customer security r
Business Development LATAM / Strategic partner
Sep 2022 - Oct 2023 (1 year 1 month)
Led partnership strategy and commercial expansion across Latin America.
• Increased profitability by 21% within six months by optimising commercial development and strategic account activities.
• Expanded market share by 3% through strategic positioning and new-client acquisition.
• Negotiated long-term agreements with regional key accounts to support sustainable market expansion.
Business development in Latin America/ Strategic Partner
Nov 2018 - May 2022 (3 years 6 months)
Supported international companies entering and expanding across Latin American markets through market development, partnerships and strategic account management.
• Increased sales by 20% through targeted market-development and commercial initiatives.
• Expanded market reach by 30% by identifying and developing new market opportunities.
• Led key-account development, solution selling and market-e
Business representative European Union and Asia
Oct 2017 - Oct 2018 (1 year)
Supported international business development and market-expansion activities across European and Asian markets.
• Identified and developed new business opportunities across international markets.
• Managed relationships with commercial stakeholders and prospective partners.
• Supported strategic business-development initiatives across multiple regions.
| Business Consultant | Growth Opportunities | Pharma
Mar 2014 - Aug 2017 (3 years 5 months)
Provided independent consulting services to pharmaceutical and healthcare organisations, supporting business development, operational improvement, regulatory requirements and market expansion.
• Developed policies and operating procedures supporting regulatory and business requirements.
• Conducted business and operational risk assessments to identify improvement opportunities and support decisi
- Directed market research initiatives to analyze OTC market needs and preferences.
- Created and implemented competitive pricing strategies for new sub-categories, resulting in a X% increase in sales.
- Established and nurtured partnerships with key category collaborators, leading to a X% growth in market share.
- Conducted market research for OTC products
- Developed pricing strategies
- Cultiv
Increased Sales and Efficiency, and Improved Customer Retention in IT Sales and Solution Selling
As a key account manager in the IT sales industry, I spearheaded strategic initiatives that resulted in a 25% boost in product sales by focusing on medical device marketing. Enhancing the sales team's efficiency by 15%, through targeted training and performance monitoring, led to a 10% increase in tot
Directed High-Impact Sales and Market Strategies in the Pharmacy Sector
Led the development of effective sales strategies focused on maximizing commercial opportunities and implementing targeted promotions across the pharmacy segment. Leveraged a blend of pharmacological insight and sales expertise to identify high-value product opportunities, driving a 20% increase in Over-the-Counter (OTC) prod
Education
Degrees, certifications, and relevant coursework
AttackIQ
Strategic Cybersecurity Management
Issued Feb 2026 · Expired Feb 2026
Strategic Project Risk Management
Issued Jan 2026
The Valley Business & Tech School
Cybersecurity expert
2023 - 2023
Advanced cybersecurity training focused on enterprise and regulated environments, with a strong emphasis on practical security operations and audit readiness.
Coverage included:
Operating systems security (Windows, Linux, macOS)
Active Directory and infrastructure hardening
Security evaluation and firmware analysis
Training areas:
Ethical hacking and penetration testing
Malware analysis and
University of Pennsylvania
Specialized Program - Business Analytics, Procesamiento de datos
2021 - 2021
Specialized programme in business analytics for strategic decision-making, covering data visualisation, statistical analysis, forecasting, process optimisation and performance measurement.
Universidad Rey Juan Carlos
Master of Business Administration (MBA), Management and Leadership
2015 - 2017
MBA focused on business strategy, management, leadership, decision-making, operations and organisational development. This business foundation supports my subsequent work across technology, cybersecurity governance and regulated industries.
Cerem Business School
Master of Marketing, Marketing/Gestión de marketing, general
2015 - 2016
During my master's program, I have had the opportunity to develop fundamental skills in strategic marketing. My mastery of the art of data analysis has become an invaluable resource in my skill set. By immersing myself in the realm of data analysis, I have become adept at using advanced tools to extract valuable insights into consumer behavior, market trends, and growing competition. By unraveling
Condor Blanco
Business Coach, Sales, sales promotion and marketing activities
2014 - 2014
As a business coach, my focus on effective communication, leadership, and strategic thinking is complemented by key areas such as auditing, ISO, risk, controls, compliance, risk analysis, security incidents, vulnerability assessment, and best practices.
Using effective communication skills, I actively listen to my clients and use powerful questions to help them reflect on their business challenge
Universidad Metropolitana (VE)
Pharmaceutical Management Diploma, Commercial
2012 - 2013
Diploma focused on pharmaceutical management, quality, operations, financial management, leadership and commercial decision-making within regulated healthcare environments.
Universidad Metropolitana (VE)
Trade Marketing, Marketing
2013 - 2013
With a diploma in trade marketing, I have honed essential skills in data analysis, promotion design and execution, and effective negotiation.
In today's digital landscape, I understand the critical importance of cybersecurity in marketing activities. By integrating cybersecurity practices into marketing campaigns and strategies, I ensure the protection of customer data, safeguarding against potent
Universidad 'Santa María'
Pharmacist, Health
2005 - 2010
Degree in Pharmacy covering pharmaceutical sciences, healthcare, laboratory practices, quality, patient safety and regulated healthcare operations.
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Salary expectations
Social media
Job categories
Skills
Interested in hiring Ostosmind?
You can contact Ostosmind and 90k+ other talented remote workers on Himalayas.
Message OstosmindGet matched with your dream remote job
Sign up now and join over 250,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
