Today at Inprosec Human Capital we present to you Iago González Lores, consultant specialized in SAP and SAP GRC security, among other functions.
What is your function within Inprosec?
In April 2018 I started my professional career at Inprosec in the IT department while I was completing my studies. He carried out internal IT support tasks, and managed the company’s IT systems and their maintenance. I also participated in the development of several tools for the improvement and optimization of internal management. Since April 2019, I had the opportunity to be part of the SAP department as a consultant specialized in SAP security and SAP GRC. Currently my daily work is focused on managing various SAP security services for clients in a wide range of industries.
What would you highlight about your role in the company?
What I would highlight most are the services to end users, as every day can be an adventure. I’m sure that’s something that all of us who work for the end customer agree on, and that’s that you never know what’s waiting for you tomorrow when you open the mail. That uncertainty seems to me to be a motivation, since it doesn’t allow you to fall into a routine and there is never a morning like the one before. Personally I find this very positive as it constantly breaks your comfort zone and does not allow you to relax, you need to be learning every day. Furthermore, I find it very positive to have the possibility of dealing on a daily basis with users from different countries and cultures, as you can take out and learn a lot from the way you work in other countries.
What has Inprosec meant to your professional career?
As for my professional career, it has meant almost everything since I have been here almost 3 years. Previously I worked for 2 years at the University of Vigo in the IT department while I was finishing my studies, and I had the opportunity to participate for two months in the biometric security department at Gradiant during my university internship. Curiously, I discovered Inprosec during an introductory cyber security course at my faculty, at the Escola de Enxeñaría de Telecomunicación, where CEO Iago Fortes was a speaker at one of the sessions. I had the opportunity to discuss certain aspects of his presentation at the end of it with him, and he told me about the company and that they were looking for people to train. A few months later, following them on the LinkedIn network, I saw the job offer they posted, and I clicked on it to apply for the interview. The outcome of the story you can imagine 😊
Thanks to the trust and support of the organization I have been able to train as an SAP consultant, and I am sure that there is still a long professional development to be made with this team.
How do you manage to reconcile your personal and professional life?
In this respect, Inprosec allows a lot of time flexibility, and it has even been possible to telework on a daily basis for years. As far as my personal case is concerned, I have more ease than other colleagues as I have no children or dependents with whom I must juggle my schedules. Although it seems like a minor issue, I do have my dear dog, Max, in my care. It’s already known to half the office! By relying on me to go out for their walks, the flexible hours offered by the company help me enormously to be able to organize myself on a daily basis and to always be able to start a little later, or stop a little earlier to take the animal out. For me and I’m sure for other people who have pets, having these possibilities is of great value.
Tell us an anecdote that has caught your attention at some stage in Inprosec.
As an anecdote I remember an incident with a user, which reported a problem, but we did not locate anything out of the ordinary in his account, so we asked him to confirm which was the user he was using and reported the error. It turns out that he was using a generic user on the shop floor, which employees use depending on who is on that shift working in the chain. The funny thing about this is that, instead of writing it down, he sent us a picture where you could see next to the computer the username and password perfectly laminated so that it would not deteriorate. All I’ll say is that the password had the number 2012. . . . ! You can get an idea of how many years that password has been stuck on the wall there, without even changing it! Obviously, a security incident opened up.
What do you value most about working for a company like Inprosec?
There are several points that I would highlight, but without a doubt one of the ones that I value the most is the good atmosphere that exists with the colleagues, which I think is basic and one of the key pieces in the company. We’re a team, and that’s ultimately reflected in the day-to-day. On the other hand, I also find very interesting the professional development that you are faced with from day one, which is challenging and you always have another objective to set as a goal. The company gets involved with your training, and helps you to continue developing your professional profile.
As an employee of a company that specializes in cybersecurity, what is your advice to any entrepreneur who is starting out with respect to their systems?
It seems complex to me to summarize it in a couple of sentences, but my advice according to what I’ve been seeing in companies, would be divided in two:
- Add in all internal projects a milestone dedicated to security, either physical, network, in the code developed, or in the implementation of authorizations to users. Many times this is not taken into account and is done months or years later when a gap has been detected or an incident has occurred, and in the end the cost is always higher.
- Train all employees in basic notions of computer security, without exception. Social engineering in recent years has been one of the weaknesses of companies. It is very useful to train and raise the awareness of all the members of the company.
What are your hobbies at the end of the working day?
As for my hobbies, I’m unable to sit still. In the last few years I have been practicing boxing, although now with the COVID I am focusing more on surfing. Outside the sport I am a big fan of nature photography, and I try every week to make some time to go with the dog and my road camera.
Who do you “nominate” to interview next and why?
I am going to choose Tamara Rivera, because she has been at Inprosec for quite some time, I think she has had quite a lot of experience within the company and I find it interesting that she shares her most experienced point of view in the SAP Security department.
