Bruno Cavalcanti Email & Phone Number

Rio De Janeiro, Brazil

São Paulo, Brazil

Acting as a Cyber ​​Engineer, disseminating the correct use of security components, validating solutions through the use of cyber standards, reference architectures and Blueprints, and directing teams regarding the best solution design from a Cyber ​​Security point of view.As a Cyber ​​Engineer, I act as a facilitator and contribute to DA's (Design Authority) so that projects meet the security requirements imposed by the operational and organizational model. Direct claimants to the contacts and/or processes necessary for sequencing.During participation in the DA meetings, my role is to evaluate the architectures together with the Architects, Chapters and Engineers, and seek to understand whether security controls are implemented in the solution to make the entire ecosystem more secure during the design phase.My Key Responsibilities include:- Participation in multidisciplinary groups to validate project solutions in the architectural design phase (OWASP SAMM Model)- Support Cross-Functional Teams in Projects;- Collaborating with other teams during project design phases, providing insights on information security;- Analyzing solution architectures based on the Blueprint, identifying gaps, risks and vulnerabilities;- Offering consultative advice on security practices and best approaches to mitigate threats;- Creation of a security opinion based on the requirements demanded by the institution;- Issue a technical cybersecurity opinion for project sequencing;

Rio De Janeiro, Brazil

Assist the Technology Management with Information Security Governance, Operations and Controls, improving the information security culture and ISMS.Develop a strategic planning and Cybersecurity Master Plan focused on Information Security Best Practices to ensure the Security Program, Security Compliance (CSPM), Cyber Insurance, Operation, Policies and Procedures, Projects (PCI-DSS, LGPD/GDPR), Vulnerability Management, Patch Management, MDR/EDR Operation, Cyber Threat Intelligence, Incident Response Management, Security Awareness and Security Champions Program, centered on all knowledge of the main cybersecurity frameworks (OWASP, CIS Controls, NIST CSF, ISO, SANS, MITRE).Responsible for structuring and sustaining the Cybersecurity department and team from scratch, always focusing on security maturity throughout the company, driving growth and the level of the Company's security posture, and subsequently leading this team.Acting as the single point of contact in regulatory projects (PCI-DSS, LGPD) bringing together business areas and important departments of the company within the project context together with support consultancy. Additionally, I also acted as a security point of contact at Tech Leads meetings, presenting reports (weekly notes) of related activities, and focal point for matters related to cyber insurance, investigation and response to fraud attempts,

Rio De Janeiro E Região, Brasil

Information Security Operation and Compliances:Vulnerability Management;Patch Management;Anti-malware Operation/Management; Internal Security Controls and Auditing;Identity Access Management;Privileged Access Management; InfoSec Policy, Security Awareness, Risk assessment;Ensure compliance within the Business Unit to Company Information Security standards;Perform assessments of the Business Unit practices and projects against the Information Security Control standards to identify gaps and apply proper recommendation;Support business projects in accordance with the company’s norms and standards;Information Security focal point on regulatory projects (LGPD);

Rio De Janeiro Area, Brazil

Responsible for the Information Security Operation and Compliances, Vulnerability Management, Patch Management, Anti-malware Operation/Management, Internal Security Controls and Auditing, SOP, InfoSec Policy, Security Awareness.Also working on PCI-DSS project with the PMO / AWS /DEVOPS Team focused on the PCI certification for Wooza environment.

Rio De Janeiro E Região, Brasil

Technical Project Leader on Business Unit and Information Security Projects, was part of the team that conducted a data migration project from a large Financial Institution to Prudential do Brasil, attending a new segment of operations for the company.Supports and provides guidance to the Business Unit management team to ensure the business understands and complies to the Information Security and Technology standards as outlined by the Information Security Office.Ensure compliance within the Business Unit to Prudential Information Security standards.Ensure operational projects mandated by Prudential’s Information Security Office are implemented within the Business Unit.Perform assessments of the Business Unit practices against the Information Security Control standards to identify gaps.

Rio De Janeiro E Região, Brasil

Responsible for maintaining the infrastructure and security of the headquarters in Rio de Janeiro, and the operational bases of the Hangars at the Jacarepaguá, Cabo Frio and Macaé airports, directly responsible for activities related to Information Security, network infrastructure, hardware and servers, software, backup, end user support, data link and internet, intranet and telephony services, supervising the team and service providers, prospecting new products and services, aiming to fulfill IT actions aligned with the company's strategies.Experience developing, documenting, and implementing information security policies, standards, and procedures, DRP, BCP, SOX Compliance and Information Security Management.Also accountable for the project improvement process and internal controls, which had the purpose of implementing policies and procedures for the company, inaccordance with Sarbanes-Oxley, as well as for the ERP system (RM TOTVS) redevelopment project, Modules and Processes of the company in the system, executing the Information Security management, access control and periodic and normative reviews focusing on security audits.

Brasil

Responsible for BHP Billiton IT Infrastructure and Service Delivery for the Rio de Janeiro office with 2 other remote sites (São Luis / MA and Ouro Preto / MG) providing adequate infra-service and support services, following the company's global policy, currently reporting to The Information Management team in Perth, Australia.Coordinating Service Desk staff level 1 and level 2, DBA and Wintel as a contracted company resource (CSC - Computer Sciences Corporation).Outsourcing contract management, outsourcing of IT services, Expenses Report, Budget, creation of policies and procedures, Rollout and implementation of Global projects and control and compliance of audits and SOX complement the activities carried out.

Rio De Janeiro

Providing Technical and Hardware services, service desk support and field support to end users. Support in Windows 2000, XP, network, Outlook, SAP and other company softwares.

Rio De Janeiro

Customer service and support by telephone and remote access, Notes 5 and 6.5 support, Windows 2000 / XP, SAP R / 3, and other company applications.

Pós Graduado, Redes, Servidores, Segurança

Pós graduação em Segurança de Redes de Computadores

Redes De Computadores, Redes De Computadores, Infraestrutura