Amanda Suo

Highly skilled and certified Cyber Security Manager with over 10 years of experience in IT security, risk management, compliance, and standardization. Proven expertise in coordinating IT audits, ensuring regulatory compliance (e.g., GDPR, ISO 27001), and managing complex cybersecurity programs. Adept at identifying and mitigating risks, developing data protection policies, and leading cross-functional teams to achieve organizational security objectives.

Strong background in international standardization (ISO/IEC, CEN/CLC) and cutting-edge technologies such as cybersecurity, blockchain, IoT, and quantum technologies.

ICT Project Manager Standardization at UNE, Spanish Association for Standardization (2018-07 – Present)

• Cybersecurity & Data Protection: Led the development of technical standards for cybersecurity, privacy, and data protection, ensuring alignment with international regulations (e.g., GDPR, NIS2, DORA, CRA).
• Risk Management: Conducted risk assessments and implemented mitigation strategies for critical infrastructure projects.
• Compliance Audits: Coordinated IT audits to ensure compliance with ISO 27001, NIST, and COBIT frameworks.
• Stakeholder Collaboration: Acted as the primary point of contact for national and international technical committees, fostering collaboration and consensus-building.
• Training & Support: Provided training and support to team members on cybersecurity best practices, risk management, and compliance processes.
• Cutting-Edge Technologies: Managed standardization projects in Blockchain & DLT, IoT, AI, and Quantum technologies, ensuring secure and innovative solutions.

IT Security Consultant at PwC (2015-05 – 2018-07)

• Compliance & Audits: Advised on IT risk regulations (PCI-DSS, ISO 27001, NIST) and conducted compliance audits for international financial institutions.
• Risk Assessment: Applied risk analysis methodologies (MAGERIT, ISO 31000) to identify and mitigate security risks.
• Data Protection: Developed and implemented data protection policies and procedures, ensuring compliance with GDPR and other regulations.
• Business Continuity: Designed and executed business continuity and disaster recovery plans for critical infrastructure.
• Stakeholder Management: Collaborated with technical teams and regulatory bodies to ensure alignment with legal and security requirements.

Cybersecurity Operator at InnoTec System - TELEFÓNICA SOC (2013-08 – 2018-05)

• Fraud Prevention: Detected and mitigated online fraud attempts, protecting brand reputation and customer data.
• Incident Response: Coordinated with global CSIRT/CERT teams to remediate security incidents and prevent future attacks.
• Compliance Monitoring: Ensured compliance with SLAs and KPIs, maintaining high standards of service delivery.
• Stakeholder Communication: Worked closely with clients (e.g., banks, public companies) to address security concerns and implement mitigation strategies.

Master’s Degree in Information and Communications Technology Security – Universidad Europea de Madrid (UEM) (2020 – 2020)

Master's Degree in Environment Science: Human and Socio-Economic Dimensions – Universidad Complutense de Madrid (UCM) (2011 – 2011)

Double Licentiate Degrees in Business Administration & Computer technologies – ISFE Burgos-HND Edexcel UK & China Dalian University of International Studies (2010 – 2010)