SpilionInterim · fractional · vCISO
Run your security for a while
Head of Security, SecOps lead or vCISO through a transition, growth or a rebuild. Strategy, governance, board reporting, and coaching the team that stays.
Ilias Spiliopoulos · Independent security practice
Secure what Europe runs on.Payments, energy, and everything that can’t go down.
- ex-iDEAL
- ex-Wero
- CISSP · CISM · CRISC
- CTO @ AdversIQ
Spilion is my independent security practice. A small number of senior engagements for Europe’s critical infrastructure: strategy at the top, hands on the cryptography underneath.
- 10+years building, fixing and growing security
- 4sectors, so far
- Payments & finance
- Energy & utilities
- AI
- B2B platforms
What I actually do
Architecture · IAM · PKI
Design it so it holds
Cloud, identity and platform architecture, including hands-on IAM, PKI and key management built and operated in regulated environments.
BC/DR · BIA · crisis simulation
Make sure it comes back
Continuity and disaster recovery programmes, impact analyses and crisis simulations that get run, not just written.
Critical infrastructure · sovereignty
Keep it in European hands
Payment platforms, energy data exchanges and other systems where availability is critical. Also for organisations reducing their dependence on infrastructure they don’t control.
ISO 27001 · DORA · NIS2
Pass the audit honestly
ISO 27001, ISAE 3000, NIST CSF, DORA, NIS2. Controls that hold up because they live in production, not in a binder.
Not sure which?
Tell me what’s going on
That’s the normal starting point. One conversation, and an honest answer on whether I’m the right person.
info@spilion.nlAlso building
I’m also co-founder and CTO of AdversIQ: supply-chain and third-party cyber risk for Europe, hosted on European infrastructure and out of reach of the US CLOUD Act.
adversiq.com
Hi, I’m Ilias.
Digital sovereignty isn’t abstract to me. I’ve worked on Europe’s own payment rails: iDEAL in the Netherlands, and Wero, the European alternative to Visa, Mastercard and PayPal.
Around that, more than a decade of building, fixing and growing security: global B2B platforms and mapping data at HERE, payments, and now energy and AI.
Based in the Netherlands, working across Europe.
- Now
- Security architecture in the energy sector: identity, authentication, authorisation. Plus fractional Technical Information Security Officer at an AI start-up building assurance software for major infrastructure projects.
- Wero · EPI
- Security operations and key management for the pan-European payments platform.
- iDEAL · Currence
- Information Security Officer through the launch of the next-generation platform. Cryptography, the internal PKI, and risk under ISO 27001 and ISAE 3000 Type II.
- HERE Technologies
- Enterprise resilience across a global multi-cloud platform: disaster recovery, business continuity, ISO 27001, SOC 2, CSA STAR and HITRUST.
- CISSP
- CISM
- CRISC
Where I’ve been
6–7 Oct 2026
ONE Conference
With AdversIQ in the Made in Europe Expo. World Forum, The Hague.
Stand 1Expo
9 Sep 2026
Cybersec Netherlands
AdversIQ had its own stand, and on top of that I spoke as CTO with CEO Mischa Rick van Geelen: OMG! That hacked vendor was ours?!
Jaarbeurs, Utrecht.
Stand 11.C024 + talkWatch the talk
May 2026
Cyber Security District
Panelist on digital sovereignty and the future of cybersecurity in Europe, as an independent expert. HSD Campus, The Hague.
PanelThe Hague
Free guide
Don’t be the easy one.
A short, practical guide to staying safe online, for people who aren’t technical. It starts with one plain page.
Get in touch
info@spilion.nlNew engagements, introductions, or a coffee about where Europe’s security needs to go.
linkedin.com/in/iliasspiliopoulos