Governance & Compliance
- AI Governance
- EU AI Act
- GDPR
- ISO 27001
- PCI DSS
- TISAX
- Risk & Audit Committees
- Board reporting
Available for first board mandate
Technology and AI oversight, brought into the boardroom.
More than twelve years on executive committees of multinational groups (Adeo, ENGIE, ABAI, Nextlane), now focused on AI governance, EU AI Act compliance and cyber risk as a board-level matter.
Madrid · Spain
In numbers
12+Executive years
4Executive committees · Direct board reporting
350+Global team
10Countries of operation
3M&A processes led
€25M+Aggregate budget
Board profile
Business judgement honed on the executive committee. Active technical understanding with LLMs and cloud-native architectures. Ongoing work on the EU AI Act and Recommendation 23 of the Spanish Good Governance Code.
Independent director available for my first board mandate, with recurring experience reporting to Boards of Directors from the executive committee.
Specialised in technology strategy oversight, AI governance, cyber risk management and EU AI Act readiness ahead of the application of its high-risk obligations.
As an independent professional I maintain full availability for board mandates and advisory roles. Puzzle Tech & Sec is a separate vehicle: my strategic advisory firm with its own team.
Doctrinal initiative
I have developed a doctrinal body in Spanish on the technology committee in boards of directors
CTIF (Committee on Technology, Innovation and the Future) is the doctrinal initiative I promote for the formalisation in Spanish boards of a specialised committee on technology, data and AI, within the framework of Recommendation 23 of the Good Governance Code. A ~160-page master document, twelve guiding principles and ten substantive sections that any board can consult, cite or adopt.
- pages in the master document
- 160
- guiding principles
- 12
- doctrinal sections
- 10
- year founded
- 2026
Board contribution areas
Four fronts where I bring independent judgement.
Strategic Oversight
- Corporate technology strategy
- Cyber risk as Board matter
- AI investment & ROI
- Technology M&A
- Digital operating model
Risk & Resilience
- Cyber risk
- Business continuity
- Third-party technology risk
- Data sovereignty
- AI ethics
Executive reading
- Direct board reporting
- Global teams of 350+
- Expansion across 10 countries
- Post-acquisition integration
- Business model transformation
Insights
View all insights →Notes on AI governance and technology oversight from the boardroom.
- 17 June 20268 min read
Anatomy of an ATS: why your recruitment system already binds you (even though the AI Act has been postponed)
Your company almost certainly operates an ATS that filters and scores candidates. The postponement of the AI Act's high-risk obligations to 2027 does not exempt you: Spanish employment and data-protection law already binds you today. Anatomy of a high-risk system that almost no one has classified.
Read article → - 17 June 20267 min read
The EU AI Act's moving deadline: how it evolved, the postponement to 2027, and what doesn't change for your board
The EU AI Act's timeline has been a moving target from the start — and in 2026 it moved again: the 'Digital Omnibus' postpones high-risk obligations from 2026 to late 2027. The story of that evolution, and the governance lesson: the deadline moves; the duty does not.
Read article → - 1 June 20268 min read
Annex III of the EU AI Act: the practical list of high-risk systems you are probably already operating
Annex III of Regulation (EU) 2024/1689 defines eight categories of AI systems considered high risk. This is the practical list with real examples to audit your organisation before August 2026.
Read article →
Contact
AI governance in the boardroom.
If your board is considering bringing independent judgement on technology, AI governance and EU AI Act, let's talk.
For ad-hoc advisory or retainer with published fees →- [email protected]
- Phone
- +34 646 150 717
- /in/fernandojimenezgarcia
- Location
- Madrid · Spain