Specialist in information security management system (since 2008) and cybersecurity (since 2017); having greater experience in topics such as risk management, audits and continuous improvements, IT continuity, technical documentation and secure configurations (hardening); for which I have developed and used skills such as analytical skills, proactivity, coordination, self-learning and writing.
• I executed hardening on Linux. • Coordinated execution of ethical hacking. • I identified and analyzed technological infrastructure risks. • Developed IT contingency plans and coordinated test runs. • I checked network access accounts. • Monitored the deployment of antivirus and patches. • I promoted the upgrade of operating systems. • Participated in IT security audits and coordinated the remediation of findings. • Participated in software development security meetings.
realização principal• I promoted the elevation of the security level of the institution's technological infrastructure.
• I coordinated the maintenance of the ISMS with the different areas of the entity. • Reviewed policies and procedures related to the ISMS, including the IT process. • I reviewed risk matrices of the entity's processes and proposed updating its methodology. • I participated in security audits (audited part) and coordinated the correction of findings.
realização principal• I obtained compliance with the service provided.
• I promoted Oracle hardening. • I coordinated the execution of ethical hacking. • I identified and analyzed technological infrastructure risks. • Developed IT contingency plans and coordinated test runs. • I developed policies and procedures based on ISO 27001. • I participated in IT security audits (audited part) and coordinated the correction of findings.
realização principal• I achieved that, for the first time, hardening was applied as a good security practice to follow, without it being a control requirement of ISO 27001:2013.