Alejandro G.-Cybersecurity GRC & Assurance Consultant | ISO 27001 | NIST | EU Cybersecurity
Check rate
Experience
Cybersecurity Expert / Evaluator
European Commission
- Evaluate European cybersecurity and digital initiatives against technical, governance, risk and implementation criteria.
- Assess security architecture, cyber risk, operational resilience, data protection and governance approaches within European projects.
- Produce structured assessments and recommendations for complex cybersecurity initiatives involving multiple stakeholders.
Social Engineering Specialist
Kymatio
- Supported human-risk governance through security assessments, phishing/vishing exercises and awareness initiatives.
- Analyzed security indicators and contributed to risk-based remediation and stakeholder reporting.
SOC 2 Readiness Consultant
Accurate Global INC.
- Support security assurance and compliance assessments, including control mapping, evidence requirements, gap identification and remediation.
- Assess controls covering access management, change management, incident response, business continuity and third-party risk.
- Coordinate documentation and evidence to support audit readiness and management review.
Founder & Cybersecurity GRC Consultant
SpectraSec
- Lead cybersecurity governance, risk and compliance engagements across regulated and technology-driven organizations.
- Develop and maintain security policies, procedures, risk registers, Statements of Applicability, control frameworks and governance documentation.
- Perform cybersecurity maturity, gap and compliance assessments against ISO/IEC 27001, NIST, NIS2, SOC 2 and related security requirements.
- Support internal and external audits through readiness assessments, evidence collection, control validation, documentation management and stakeholder coordination.
- Identify control deficiencies and non-conformities and track remediation actions through closure.
- Define security metrics, KPIs/KRIs, responsibilities and reporting mechanisms for management and security stakeholders.
- Conduct information security risk assessments covering organizational, technical, third-party and operational risks.
Industry experience
See where this freelancer has spent most of their professional time.
Experienced in Information Technology, Professional Services, and Government and Administration.
Business area experience
See which departments and functions this freelancer has contributed to most.
Experienced in Information Technology and Audit.
Summary
Cybersecurity GRC and assurance professional with 5+ years of experience across information security governance, risk management, compliance, security assessments and audit readiness. Experienced in supporting regulated and international environments, including European cybersecurity initiatives, and translating regulatory and security requirements into policies, controls, risk treatment actions, evidence and management reporting. Strong knowledge of ISO/IEC 27001, information security risk management, NIST security controls, NIS2 and European cybersecurity requirements, with experience supporting audits, remediation tracking and security KPI/KRI reporting.
Skills
- Governance & Assurance: Cybersecurity Governance · Security Policies & Standards · Security Assurance · Audit Readiness · Control Assessment · Remediation Tracking
- Risk Management: Information Security Risk Assessment · Risk Registers · Risk Treatment · Third-Party Risk · Maturity Assessments · Gap Analysis
- Frameworks & Regulation: Iso/Iec 27001:2022 · Iso 27005 Principles · Nist Security Controls · Nis2 · Soc 2 · Gdpr · Eu Cybersecurity Regulation
- Reporting: Security Kpi/Kri · Audit Evidence · Management Reporting · Control Documentation · Stakeholder Coordination
Languages
Education
The Valley Business & Tech School
Cybersecurity Expert Program · Cybersecurity
University of Pennsylvania
Specialized Program · Business Analytics
Universidad Rey Juan Carlos
MBA · Management & Leadership · Móstoles, Spain
Certifications & licenses
Cisco CCST Cybersecurity
Fortinet NSE 1–3
Google Cybersecurity
Microsoft SC-900
Statistics
Experience
Global experience
Expertise
Qualifications
Profile
Frequently asked questions
Have questions? Find more information here.
Alejandro is based in Lanjarón, Spain and can operate in on-site, hybrid, and remote work models.
Alejandro speaks the following languages: Spanish (Native), English (Advanced).
Alejandro has at least 3 years of experience. During this time, Alejandro has worked in at least 4 different roles and for 4 different companies. The average length of individual experience is 1 year and 8 months. Note that Alejandro may not have shared all experience and actually has more experience.
Based on recent experience, Alejandro would be well-suited for roles such as: Cybersecurity Expert / Evaluator, Social Engineering Specialist, SOC 2 Readiness Consultant.
Alejandro's most recent position is Cybersecurity Expert / Evaluator at European Commission.
In recent years, Alejandro has worked for European Commission, Kymatio, Accurate Global INC., and SpectraSec.
Alejandro is most experienced in industries like Information Technology, Professional Services, and Government and Administration.
Alejandro is most experienced in business areas like Information Technology and Audit.
Alejandro holds a Master in Management & Leadership from Universidad Rey Juan Carlos.
Alejandro has 4 certificates. Among them, these include: Cisco CCST Cybersecurity, Fortinet NSE 1–3, and Google Cybersecurity.
Alejandro is immediately available full-time for suitable projects.
Daily rate distribution
The rates shown represent the typical market range for freelancers in this position based on recent contracts on our platform.
Average rates for similar positions
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 27 Sep 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Similar freelancers
Discover other experts with similar qualifications and experience
Federico L.
Matthias K.
Zoltán K.
Najat D.
Wilhelm H.
Bernhard B.
Julian V.
Isabel M.
Valentina L.
Karl-Heinz R.
Experts recently working on similar projects
Freelancers with hands-on experience in comparable project as a Cybersecurity Expert / Evaluator
Adrianna L.
Enrique G.
Abdessamad I.
Sebastián Z.
Ana S.
Kevin E.
Stefan L.
Marga M.
Monica C.
Dustin D.
Nearby freelancers
Professionals working in or nearby Lanjarón, Spain
Diego S.
Antonio C.
Stuart J.
Phillip S.
Zhuldyz S.
Florina M.
Justas R.
Evelina B.
Juan F.
Juan M.
