Spain’s hospitals and healthcare providers operate in one of the most sensitive and highly regulated environments in the country. Patient safety, clinical continuity, data protection, and regulatory compliance all depend on resilient and well-governed cybersecurity programs. The following security leaders are shaping how cybersecurity supports care delivery, research, and operational resilience across Spain’s healthcare sector.
Alejandro Nieto Esteban — Chief Information Security Officer, Hospital Clínic de Barcelona
Alejandro Nieto Esteban leads information security within one of Spain’s most prominent hospitals, combining deep technical knowledge with a strong leadership focus on digital transformation. His responsibilities include security governance, regulatory compliance, awareness and training, and incident recovery planning across the hospital environment. His approach emphasizes risk mitigation, service continuity, and positioning information security as a trusted enabler of clinical and operational excellence.
Daniel Sánchez — Chief Information Security Officer, Unilabs
Daniel Sánchez brings more than 16 years of experience across information security, risk management, privacy, and business resilience in international environments. As Chief Information Security Officer at Unilabs, he leads the global cybersecurity strategy with the objective of building a secure and digitally enabled diagnostics organization. His work is grounded in international standards and regulatory frameworks, including NIST, ISO, GDPR, and NIS2, and focuses on scalable security programs aligned with business growth.
Fernando Hernández Baute — Chief Information Security Officer, Hospiten
Fernando Hernández Baute has built a long career within the Hospiten Group, progressing through systems, operations, and cybersecurity leadership roles. As Chief Information Security Officer, he oversees IT operations and cybersecurity across healthcare facilities, ensuring service reliability, vendor coordination, and secure infrastructure management. His experience spans enterprise applications, communications, and network security in highly availability-driven clinical environments.
Eduardo Cañadas — Chief Information Security Officer, Sigesa
Eduardo Cañadas is an information security professional with more than 18 years of experience spanning cybersecurity, compliance, and infrastructure management in both public and private sectors. As Chief Information Security Officer at Sigesa, he leads cybersecurity strategy, risk analysis, and the protection of digital assets. His work includes ENS and ISO 27001 implementation, infrastructure security, business continuity, and coordination with key technology providers to support critical healthcare services.
Carlos Villa Ferrer — Chief Information Security Officer, Mutua Universal
Carlos Villa Ferrer leads cybersecurity at Mutua Universal, bringing a strong background in IT project management, software engineering, and security governance. His role focuses on managing information security, strengthening organizational awareness, and aligning cybersecurity initiatives with operational needs. His experience supports the delivery of secure and resilient healthcare services while maintaining regulatory compliance and technical stability.
Securing Care, Data, and Trust in Healthcare
Cybersecurity in hospitals and healthcare organizations is inseparable from patient safety and service continuity. These leaders operate in environments where downtime, data breaches, or system failures can have immediate real-world consequences. Through governance, resilience planning, and continuous improvement, they are strengthening trust and security across Spain’s healthcare ecosystem.
