Javier Moreno Robles
Founder of ShieldAudit · Fractional CISO
Cybersecurity experience across critical and regulated environments: banking, energy, telecoms and defence. My work has focused on security governance, risk management and regulatory compliance, alongside leadership teams and CISOs.
ShieldAudit brings that experience to organisations that need security leadership without a full-time executive hire, with one person accountable for assessment, delivery and follow-up.
Career
Roles at global technology companies, consultancies and organisations in the energy and defence sectors, on projects in financial services, energy, industry, telecoms and defence.
Fractional CISO for a technology consultancy
Leading the information security programme and supporting the organisation through to ISO/IEC 27001 certification.
Security for critical banking applications
Coordinating security for critical banking applications, including ATM infrastructure, in highly regulated cloud environments.
Head of cybersecurity and ISO/IEC 27001 certification
Responsible for the company’s cybersecurity, reporting to executive management, during the ISMS implementation and the ISO/IEC 27001 certification project through to certification.
Critical infrastructure defence
Responding to denial-of-service (DDoS) attacks on national telecoms infrastructure in real-time operations.
Infrastructure security
Administering and protecting systems in highly critical, confidential environments, with strict access control and operational continuity.
Credentials
Certified Ethical Hacker (CEH)
Certification in ethical hacking and vulnerability assessment. Obtained in 2022, valid until 2025.
ISO/IEC 27001:2022 Lead Auditor · certified training
Accredited Lead Auditor training and examination for Information Security Management Systems.
How I approach the work
Justified priorities
Every measure should reduce a specific risk at a proportionate cost.
From policy to working control
The work covers implementing controls and producing the evidence that shows they work.
Clear communication with leadership
Risks are explained in business terms, without unnecessary jargon.
Book an initial call
30 minutes to understand your organisation’s context and see how I can help.