Looking for a job

Silvia Martínez González

@silviamartnezgonzlez

CISO-as-a-Service at PrimeDefence, building GRC roadmaps, risk assessments, and security dashboards for client organizations.

Spain

Message

At PrimeDefence, I provide CISO-as-a-Service to more than five client organizations, defining security strategy and GRC roadmaps. I lead ISO 27001 projects and conduct risk assessments and security audits, following remediation through to closure.

At UNICC, I monitored and supported security operations using Splunk, Microsoft Sentinel, and Microsoft 365 security tools. I also analyzed security metrics and prepared dashboards for CISO and CTO decision-making.

Across roles with UST Global, A2Secure, eDreams Odigeo, and other organizations, I worked on PCI-DSS and ISO 27001 audits, vulnerability remediation, and security for cloud and travel environments. I’m an ISO 27001 Internal Auditor and am currently pursuing CISM.

Experience

Work history, roles, and key accomplishments

Current

Directora de Éxito del Estudiante

Current

Unihackers

Jan 2025 - Present (1 year 10 months)

Guides cybersecurity students in governance, risk management, threats, and best practices, and contributes to curriculum development.

Cybersecurity Education Governance Risk Management Curriculum Development

Current

CISO como servicio

Current

PrimeDefence

Jan 2024 - Present (2 years 10 months)

Defines security strategy and GRC roadmaps for more than 5 client organizations, serving as their technical cybersecurity reference. Leads ISO 27001 projects, conducts risk assessments and security audits, and builds security metrics and executive dashboards.

GRC ISO 27001 Risk Assessment Security Audits Security Metrics Executive Dashboards EDR Integration

Analista SOC

UNICC

Apr 2022 - Dec 2025 (3 years 8 months)

Monitored, detected, and responded to security incidents in the United Nations SOC, using Splunk, Microsoft Sentinel, and the Microsoft 365 security suite. Led a security project supporting a UN financial organization, delivering comprehensive security including alert analysis, vulnerability reviews, and security dashboards.

Splunk Microsoft Sentinel Microsoft 365 Defender Incident Response Vulnerability Management Security Dashboards SOC Operations

Analista SOC L3

ALTEN

Jan 2021 - Dec 2022 (1 year 11 months)

Operated on multiple SIEM platforms (RSA, QRadar, McAfee) in dedicated and multitenant environments. Designed detection use cases, configured event processors, and produced operational reports on incident volume, events per second, and SLA compliance.

RSA QRadar McAfee SIEM Detection Engineering Event Processing SOC Operations SLA Reporting

Consultora de Seguridad

UST Global

Jan 2021 - Dec 2021 (11 months)

Conducted PCI-DSS audits, ISO 27001 compliance assessments, and forensic audits for cyber insurance. Created security policies and procedures, managed vulnerability and patch programs with Qualys, and supported security hardening in Azure.

PCI DSS ISO 27001 Forensics Security Policies Qualys Vulnerability Management Azure Security

Security Manager

UST Global

Jan 2020 - Dec 2021 (1 year 11 months)

Led security for Move to Cloud Europe projects, integrating security by design into the development lifecycle. Managed vulnerability remediation action plans, coordinated cross-functional engineering teams, oversaw pentest planning, and reviewed third-party contracts and security budgets.

Cloud Security Security By Design Vulnerability Remediation Pentest Management Third Party Risk Management Budget Management

Security Officer

A2Secure

Jan 2019 - Dec 2020 (1 year 11 months)

Performed PCI-DSS audits, risk analysis, and GDPR compliance, and reviewed GCP infrastructure security. Delivered security operations with Suricata IDS, FortiAnalyzer WAF, Cisco Umbrella, and Cylance EDR for a consumer travel platform. Implemented machine learning automation in ELK to reduce false positives and supported Agile and non-Agile squads in remediation.