João Araújo Email & Phone Number

State Of São Paulo, Brazil

São Paulo, São Paulo, Brazil

São Paulo, Brasil

Responsible for team supervision, working on Strategy and Cyber Risk (S&R) projects for companies with annual revenues exceeding R$1 Billion with a focus on Information Technology and Automation (IT & OT) environments, aiming to:• Define a Cyber Governance Model (Committees, Roles and Responsibilities, Corporate Layers, CISO and Cyber Area position);• Assess Cyber Maturity, Gaps, and Improvements (OWASP SAMM, ISO 27002 and NIST CSF);• Identify and Classify Cyber Risks;• Assess Implemented Protection Technologies Defense in Depth and CIS Controls);• Determine Amount of Cyber Security Personnel• Develop Strategic and Operational Cyber Key Performance Indicators (KPIs);• Create a Cyber Roadmap;• Develop a Cyber Crisis Exercise Simulation;• Define Critical IT assets (Crown Jewels);• Define Security Controls (CIS Controls, ISO 27002 and OWASP SAMM);• Support Cyber Merge and Acquisition (M&A).I also served as a product owner, developed and reviewed internal cybersecurity frameworks based on good practices (NIST CSF, ISO 27002, OWASP SAMM, CIS Controls, etc.).

São Paulo E Região, Brasil

Responsible for team supervision, working on Cyber Strategy and Risk (S&R) projects with a focus on Information and Automation Technology (IT & OT) environments, aiming to:• Define a Cyber Governance Model (Committees, Roles and Responsibilities, Corporate Layers, CISO and Cyber Area position);• Assess Cyber Maturity, Gaps, and Improvements (NIST CSF, ISO 27001 and ISA/IEC 62443);• Create and Review Cyber Policies and Procedures (CIS Controls, ISO 27002, NIST SP 800-53 and ISA/IEC 62443);• Establish a Cyber Roles and Responsibilities Matrix (RACI);• Develop a Cyber Audit Plan;• Develop a Cyber Awareness and Training Plan;• Develop Strategic and Operational Cyber Key Performance Indicators (KPIs);• Create and Review a Cyber Roadmap;• Develop a Cyber Crisis Management Exercise;• Structure Cybersecurity Governance, Management, and Operations.I also served as a team supervisor, reviewed process mapping frameworks and aspects of personal data handling regulations (LGDP – Brazilian Data Protection Law) and oversaw process mapping and aspects of Personal Data Protection and Privacy projects' PMO.

Recife, Pernambuco

Responsible for team supervision in cyber security projects. I have participated in projects related to Cyber Governance Implementation (COBIT, ITIL, and ISO 27002), IT Audit (SOX), Business Intelligence (ETL, SAP, Excel, and ACL Analytics) applied to Business Process Auditing, Cyber Process Modeling, IT Internal Control Design (ITGC), Creation of Information Security Policies and Standards (ISO 27002 and NIST Cybersecurity Framework), Cyber Risk Assessment, and Cyber Performance Indicator Analysis.

Recife E Região, Brasil

Responsible for the development of desktop and mobile system projects, leading requirements elicitation, database modeling, software development, unit testing, and system deployment phases.

Recife E Região, Brasil

Responsible for the development of desktop and mobile system projects, overseeing requirements elicitation, database modeling, software development, unit testing, and system deployment. Additionally, responsible for business modeling (Business Model Canvas), business model validation (Lean Startup), customer engagement and negotiation (B2B), digital marketing (profile/website development, social media profile management, and metrics), and project management (Scrum).

Master Of Business Administration - Mba In Cyber Security, Forensics, Ethical Hacking & Devsecops, Cybersecurity

Lato Sensu - Specialization In Cybersecurity, Cybersecurity

Bachelor'S Degree In Information Systems, Information Technology

Technical'S Degree In Computer Networking, Computer Systems Networking And Telecommunications