Description

There's a fundamental difference between managing identities and governing them — that's where I work.

IAM/IGA Principal Consultant | 20+ years in information security. Owner & CEO of RM ACENTRA S.L. — Barcelona-based IAM boutique, fully independent, specialised in ENS, NIS2, DORA, GDPR and España Digital 2026 identity frameworks.

I help CISOs and programme leads design Zero Trust-aligned IAM/IGA architectures that withstand regulatory audits.

What I deliver:

IAM/IGA strategy, roadmaps & maturity assessments
Role Mining & Role Engineering (RBAC, ABAC, PBAC) across complex application landscapes
IAM Health Check: data-driven entitlement analysis, hybrid Role Mining & prioritised IAM roadmap
Separation of Duties (SoD) — audit-proof, regulatory-aligned
PAM architecture & implementation
Compliance: NIS2, DORA, GDPR, SOX, PCI DSS, ISO 27001, ENS, FINMA, VAIT, KRITIS, Swiss DSG
España Digital 2026: eIDAS & digital identity governance
CISO coaching, public speaking & IAM publications
Interim IAM Operations Management, PM or Task Force Leadership

Tools: SailPoint · Saviynt · CyberArk · MS Entra ID · Okta · OneIdentity · NEXIS4 · SAM Rolmine

Track record: 800–92,000-employee organisations in banking, insurance, healthcare, public sector, energy & education — ES, CH, DE, NL, UK.

On-site (Barcelona, Madrid, Valencia, Málaga) or remote across Spain and DACH.

→ Contact me — I respond within 1 hour.

Industry field of expertise

Languages

Swiss German
Native or bilingual
Spanish
Fluent
English
Fluent
French
Conversational
Italian
Basic
German
Native or bilingual

Workplace preferences

Can work on-site

Barcelona (up to 50km), Madrid (up to 50km), Malaga (up to 50km), Valencia (up to 50km), La Coruña (up to 50km)

IAM Experte™,
IAM Business Consultant
July 2024 - Today (1 year and 11 months)
Europe
• Role-Based Business (RBB) and Business to Identity (B2I)
• Various IAM and Information Security consulting mandates
• Regulatory compliance consulting
• Role mining and -engineering and Separation of Duties (SoD)
• Strategy development and maturity assessments/audits
• IAM architectures using leading vendors
• Additional focus on information security
Identity & Access Management (IAM) IAM Governance & Compliance (GRC, DORA, NIS2, DSGVO, ENS) Consulting Requirements Engineering Role Mining & Role Engineering (RBAC / ABAC / PBAC)
SITS AG (Traxion – BeNeLux Market Leader),
Principal IAM Business Consultant
December 2022 - June 2024 (1 year and 6 months)
Henri & Herman Opel Utrecht, Utrecht, Netherlands
• Introduced Traxion NL services to the Swiss market (going-to-market)
• Presales, Sales Enablement, and Coaching; aligned portfolio for Switzerland
• Group marketing support via tools and publications
• Held public workshops and training sessions on Identity & Access Management in the DACH region
• Delivered IAM consulting (Business to Identity), CISO coaching, taskforce leadership, ISO2700x audits
• Obtained multiple product certifications
InfoGuard AG,
Senior Cyber Security Consultant – IAM Service Champion
January 2022 - October 2022 (9 months)
Baar, Switzerland
• Piloted IAM market introduction focusing on Zero Trust Security Model, Data Protection & Security by Design/Default, and relevant risk mitigations
• Led Go-to-Market IAM strategies (marketing, sales, consulting) and product development
• Performed CIAM/IAM assessments aligned with NIST and ISO standards
• Delivered IAM and PAM consulting (organisational and technical)
• Established access management policies across multiple frameworks
• Published blog articles
• Trained and implemented NEXIS4 solutions