Compliance Consultant / Internal Auditor — ISO 27001:2022 · ENS (RD 311/2022) · DORA · TISAX v6 | GRC, SoA/Annex A, CCN-STIC 802/803/808, TPRM, TLPT, Incident Reporting
GRC consultant specialized in ISO 27001:2022, ENS (RD 311/2022) and DORA, with a track record of audits without non-conformities in TISAX v6 L2 and ENS high for the financial/means of payment, transportation, legal and IT sectors. ISMS design and implementation; I lead gap assessments, SoA (Annex A — 93 controls), internal audit, evidence and audit defense. At ENS, I apply CCN-STIC 802/803/808, categorization and reinforced measures (cloud, supply chain, surveillance). At DORA, I cover ICT risk mgmt, incident classification & reporting, third party ICT/contracts and resilience testing (incl. TLPT). I seek to collaborate with organizations that require 100% remote compliance and measurable results.