Expert source for journalists and media on artificial intelligence, cybersecurity and European regulation: NIS2, DORA and the EU AI Act. Over 30 years in technology, more than 20 as a technology director and critical programmes led in banking.
Biography

Short version
José Enrique Ibarra is an AI Project Manager and interim CIO specialising in regulated organisations. With over 30 years in technology and more than 20 as a technology director, he has led critical IT programmes in banking and works where artificial intelligence, cybersecurity and European regulation meet (NIS2, DORA and the EU AI Act). He is the founder of Atalaya GRC.
Long version
José Enrique Ibarra is an AI Project Manager and interim CIO specialising in regulated organisations. He started in 1995 as a systems administrator and has since lived through seven technology paradigm shifts, from client-server to generative AI.
He has been a technology director for more than 20 years and has spent over six leading senior IT projects in banking: critical infrastructure migrations, container platforms, identity governance, privileged accounts, SIEM, DLP and XDR, always within the supervisory framework of the financial sector.
Today he helps organisations take AI into production safely and comply with European regulation: the EU AI Act, NIS2, DORA, GDPR and Spain’s ENS. He is the founder of Atalaya GRC, a regulatory compliance platform, and publishes analysis on these topics at joseenrique.es. He works from Almería, Spain, with clients across Spain and internationally.
Topics I can speak about
Analysis, context and comment for news stories, features and interviews. Each topic links to reference content published on this site.
NIS2 and cybersecurity in Spain
Transposition of the directive, organisations in scope, supply chain and incident reporting.
02DORA and resilience in banking
Digital operational resilience, critical ICT providers and TLPT penetration testing.
03EU AI Act and AI governance
Application timeline, high-risk systems, supervision in Spain and ISO 42001.
04Generative AI and agents in business
From pilot to production, agent and Copilot security, and change management.
05Cybersecurity in banking
Zero Trust, identity governance, post-quantum cryptography and incident response.
06Technology leadership
The role of the CIO and the AI Project Manager, costs and risks of AI projects.
Fact sheet
- Name
- José Enrique Ibarra
- Role
- AI Project Manager · Interim CIO
- Company
- Founder of Atalaya GRC
- Location
- Almería (Spain)
- Interviews
- In person, by phone or by video call
- Languages
- Interviews in Spanish · written answers in Spanish or English
- Online
- joseenrique.es · LinkedIn · X @JEAIPM
Press contact
For journalists and media
info@joseenrique.esI reply personally within 48 hours. If you are working to a deadline, mention it in the subject line and I will prioritise it.