Critical Infrastructure & ICS/OT Protection
Jaime Gonzalez Ruiz
OT Cybersecurity Architect at Iberdrola (i-DE)
Specialized in Operational Technology (OT), Industrial Control Systems (ICS), and Critical Infrastructure protection. Leading the OT Security Architecture capability at Iberdrola i-DE, after establishing the organization's OT Vulnerability Management program and serving as Security Lead for next-generation SCADA platform deployments.
Skills & Domains of Expertise
Security Architecture
Secure-by-Design
Architecture Reviews
Security Governance
OT/IT Integration
OT & ICS Security
IEC 62443
SCADA Security
Network Segmentation
Industrial Networks
OT Risk Management
Application Security
SAST / DAST / SCA
Vulnerability Scanning
Secure SDLC
Python Automation
Regulations & Frameworks
Cyber Resilience Act (CRA)
ISO 27001
Critical Infrastructure Directives
Leadership & Strategy
Technical Leadership
Stakeholder Management
Risk Acceptance Governance
Languages
Spanish
Native
English
C2 Prof.
Italian
B1
French
B1
Work Experience
OT Cybersecurity Architect
Iberdrola (i-DE) · Madrid, Spain
- Lead the OT Security Architecture function within i-DE critical infrastructure initiatives.
- Define cybersecurity governance processes, Secure-by-Design methodologies, and security architecture standards for OT systems.
- Act as Security Lead for the deployment of the corporate next-generation SCADA platform, defining security requirements, conducting risk assessments, and supporting go-live decisions.
- Conduct architecture reviews and define cybersecurity requirements for industrial systems, critical infrastructure, and complex OT/IT integration projects.
- Advise engineering, operations, and executive management teams on cybersecurity architecture and industrial security risks.
- Drive and support organizational adoption of industrial cybersecurity standards including IEC 62443 and Cyber Resilience Act (CRA) compliance.
OT Cybersecurity Engineer
Iberdrola (i-DE) · Madrid, Spain
- Established and spearheaded the OT Vulnerability Management capability across critical energy infrastructure environments.
- Defined end-to-end governance processes, methodologies, and executive reporting mechanisms for vulnerability assessment, remediation, and risk acceptance.
- Led vulnerability assessments, security architecture reviews, and comprehensive security testing activities including Vulnerability Scanning, SAST, DAST, and SCA.
- Developed custom Python-based automation solutions to scale cybersecurity operations and reporting pipelines.
- Supported industrial control system security assessments, application security reviews, and incident response operations.
Cybersecurity Analyst
Fujitsu · Madrid, Spain
- Performed security incident response, threat hunting, and vulnerability assessment activities.
- Conducted advanced endpoint investigations utilizing CrowdStrike Endpoint Security.
- Supported 24/7 security monitoring using AlienVault SIEM.
- Developed automation scripts in Python to optimize analyst triage workflows.
Research Technician
Universidad Carlos III de Madrid · Madrid, Spain
- Conducted academic research on DNS-over-HTTPS (DoH) measurements at Internet scale.
- Performed large-scale data mining and network analytics using Python.
- Developed interactive frontend components in JavaScript and high-throughput backend services in Go.
Education
2021
Master in Cybersecurity
Universidad Carlos III de Madrid
2021
Master in Telecommunications Engineering
Universidad Carlos III de Madrid
2018
Laurea Magistrale in Telecommunications (Erasmus)
Politecnico di Milano (Italy)
2019
Bachelor in Telecommunications Engineering
Universidad de Sevilla