Gonzalo Martinez

Current

IT Audit Team Leader at Grupo Ferrovial

Past

Manager at Technology Security Risk Services department at Ernst & Young
Senior IT Auditor / IT Security Consultant at Ernst&Young
IT SOx Consultant at Shell (as an Ernst & Young employee)

IT Security Consultant at Cognicase

see less...

1 more...

Education

Universidad Pontificia Comillas

Connections

113 connections

Industry

Information Technology and Services

Gonzalo Martinez’s Summary

- Information Risk Management and IT Security
- Certified Information Security Auditor (CISA)
- Certified Information Security Manager (CISM)
- IT General Controls and Advanced Security in SAP system
- Information technology audit, performing security reviews of different environments, among others: Windows, Unix, AS/400, Oracle y SAP
- Implementation, advising and audit of Sarbanex Oxley Act in telecommunication, utilities and pharmaceutical industries
- Business Continuity & Disaster Recovery plan
- Data Protection Law’s Regulations Audit on Security Measures
- Digital signature implementation in financial industries

Gonzalo Martinez’s Experience

IT Audit Team Leader

Grupo Ferrovial

(Privately Held; Construction industry)

February 2009 — Present (11 months)

Responsible of IT Audit Department, leading different audits related to IT risks, governance and security (data protection law on security and legal measures, business continuity management, SAP, information systems audits) and participating in business process audits (treasury, and capex) and financial internal audits at many different companies (construction and infraestructure management) and locations (Spain, UK and Poland).
Manager at Technology Security Risk Services department

Ernst & Young

(Partnership; Accounting industry)

July 2008 — February 2009 (8 months)

Manager leading different teams and projects related to SAP and external financial audit (Telefónica and FCC).
Senior IT Auditor / IT Security Consultant

Ernst&Young

(Partnership; 10,001 or more employees; Accounting industry)

January 2005 — June 2008 (3 years 6 months)

Experienced Senior IT Auditor / IT Security Consultant at TSRS (Technology Security Risk Services) department.
IT SOx Consultant

Shell (as an Ernst & Young employee)

(Public Company; 10,001 or more employees; Oil & Energy industry)

September 2005 — December 2007 (2 years 4 months)

IT SOx Consultant, performing projects in order to assure compliance with SOx 404 requirements located in The Hague, Hamburg, Paris and London.
IT Security Consultant

Cognicase

(Public Company; 201-500 employees; Computer & Network Security industry)

May 2004 — January 2005 (9 months)

IT Security Consultant implementing digital signature (PKI)