Ship fast.
Secure early.
Govern what matters.
Engineer. Former CTO and CISO in European payments.
I work with
- Technology companies
- Payments companies
- Other regulated businesses
As
- Advisor
- Delivery lead
- Engineering lead
- Interim CTO or CISO
How I can help
Advisory
Independent advice for leadership teams before a big decision: technology strategy, architecture, organisation design, or readiness against DORA, PCI DSS or CRA. From someone who has made those decisions as CTO and CISO.
Delivery
Programmes with a clear outcome, run end to end: regulatory programmes, platform migrations, go-lives. I work across engineering, product, compliance, legal and audit until it is done.
Interim
A leadership role inside your organisation, full time or part time: delivery lead, engineering lead, CTO or CISO. Useful while you hire, through a transformation, or ahead of an audit.
Selected engagements
99.99%
availability
Interim
Interim CTO and CISO at PPRO
At a payments unicorn supervised by the CSSF and FCA, I reorganised 200 engineers into domain teams with clear ownership, moved them to daily deployments, and brought availability to 99.99%. As CISO, I led PCI DSS recertification, and later the DORA programme, which passed internal audit without significant findings.
3 months
to production
Delivery
Live in three months at ONPEX
ONPEX, a CSSF-supervised BaaS institution, hired me as CTO to bring its payments platform to production. It went live within three months, and I then made it operable at scale.
Validated
BaFin technical checks
Delivery
Entering Germany under DORA
A DORA service provider expanding into Germany had to report its Register of Information to BaFin. I reviewed and corrected the register, aligned its structure with BaFin’s reporting requirements, and worked with the team until its submissions passed BaFin’s technical validation.
Automated
CRA readiness checks
Advisory
CRA readiness for a security vendor
A vulnerability scanning vendor preparing for the CRA wanted a clear view of where it stood. I built a pipeline that automatically verifies the requirements its product already covers, and turned the remaining gaps into a roadmap aligned with its product plans.
The full career history is on the About page.
Governance, engineering first
Governance starts with what teams already do every day: standups, code reviews, vulnerability scans, deployments. Built on those activities, it gives non-technical stakeholders something they understand and auditors something they accept, with only the overhead that adds value.
coderoom
An open-source shell for your AI coding agents. Work with them live, script what repeats. Bounded loops and your own checks decide when the work is done; the engineer stays in charge.
Explore coderoom > /invite ada
> /def tests /shell go test ./...
> /loop @ada make the tests pass without weakening them /until /tests /max 3
Latest insights
What I learn building and running systems: engineering, delivery, security, governance and AI agents.
- Scripting your agent chats: how I stopped copying text between my models
- From Samples to Data Streams: Auditing Organisations That Change a Thousand Times a Day
- Auditing Organisations That Change a Thousand Times a Day (Short Version)
- Mob Programming for One
- Beyond the first submission: three governance failures that will break your DORA RoI in 2026
Looking for an advisor, a delivery lead, or an interim CTO or CISO?
Remote first from Valencia, with travel. Full time or part time. Spanish, English and German.