Daniel Ocaña Bruno ∴ Email & Phone Number

São Paulo, Sp, Br

São Paulo, Brazil

• Aligning the information security strategy with business objectives.• Identifying, assessing, and mitigating information security risks that could impact the business.• Acting as a liaison between the IT security team and business units.• Leading the response to security incidents and breaches.• Measuring and reporting on the effectiveness of the information security program initiatives.• Researching new security solutions, recommending improvements to existing practices, and fostering a culture of continuous improvement.• Promoting a culture of security awareness within the organization.• Management of Global IT Compliance programme• Issue Management – SOX, IA, IS, PDP, CYB, SSI, Enterprise issues• Management of Internal Audit (Finance and IT) reviews of the offices• Management of Internal Audit for Enterprise audits• Audit Reports analysis and approval• Management of compliance metrics• Provide training and ongoing support to agencies on all IT Controls and Compliance initiatives• Provide advisory to agencies on IT Compliance-related matters• Work with Corporate Teams on Global M&P Guide and SP&Ps Refresh and Review• Co-ordinating control activities with Internal Audit Team, Corporate and External Auditing Companies• Working with CISO on Information Security and Cyber Security initiatives • Active Directory compliance management• Analysis of Compliance Reports - e.g. SOC Reports• Provide training to client teams on Information security requirements• Provide IT Support and input for both GDPR and LGPD programmes• Guidance and monitoring on TPRM initiatives.

São Paulo, Brazil

• Management of Global IT SOX programme• Issue Management – SOX, IA, IS, PDP, CYB, SSI, Enterprise issues• Management of Internal Audit (Finance and IT) reviews of the offices• Management of Internal Audit for Enterprise audits• Audit Reports analysis and approval• Management of compliance metrics• Provide training and ongoing support to agencies on all IT Controls and Compliance initiatives• Provide advisory to agencies on IT Compliance-related matters• Work with Corporate Teams on Global M&P Guide and SP&Ps Refresh and Review• Co-ordinating control activities with Internal Audit Team, Corporate and External Auditing Companies• Working with CISO on Information Security and Cyber Security initiatives • Active Directory compliance management• Analysis of Compliance Reports - e.g. SOC Reports• Provide training to client teams on Information security requirements• Provide IT Support and input for both GDPR and LGPD programmes• Guidance and monitoring on TPRM initiatives.

São Paulo, Brasil

Especialista em Gestão e Planejamento de Tecnologia e IT GRC para Empresas Nacionais e Multinacionais.

São Paulo, Brasil

• IT and BIS Lead (BISO) for Brazil, LatAm, Caribbean and Miami markets. • Clients and suppliers’ contracts analysis, negotiation and compliance, focusing on IT&IS requirements.• Responsible for Due Diligence processes on merges and acquisitions. • Member of both Creative Tech and Digital Transformation teams. • Planning of customized solution for clients. • IT GRC (IT SOX/INFOSEC/CYB/IA-IT) in-country and regional – implementation, management and audit (i.e. scoping, planning, fieldwork), issues tracking and remediation processes.• Analysis, approval and management of both local and regional Chargeback, • IT Budget (CapEx and OpEx) Brazil, LatAm, Caribbean and Miami – analysis, planning, management and approval. • Regional Direction on both external and internal audits. • Network & Resources rationalization. • Federated Models and IT structures centralization, comprehending structures from different companies of the same group. • Leadership on the project that migrated the company’s fixed telephony to UC platform Skype for Business (SIP) on all Brazil unities. • IT and Tech teams leadership on the Brazilian General Data Protection Law (LGPD) implementation project, partnering with legal. • Participation on the IT federation consolidation strategy for Brazil, Mexico and Argentina units. • Management of infrastructure change projects realized on units in Brazil, Argentina, Mexico and Puerto Rico. • LatAm representative on the IT Global Council/Committee, responsible for analyzing and deciding IT strategy, budget and technology-related projects on a regional level.• Member of the global decision groups WW IT Summits, Preparedness, WW Standards, WW Risk Management, WW Compliance Group, WW Unified Comms, WW Global Infrastructure.• Budgetary and methodological management on projects for virtualization, centralization and redundancy, aiming to centralize, streamline and maintain adequacy of the Brazil unities’ Data Center structures.

São Paulo Area, Brazil

• Budget management (CapEx and OpEx). • Project management and special projects implementation. • Responsible for the following areas: Novell and Windows networks maintenance and management, hardware, software development and 24x7x365 tech support. • Analysis, development and procurement of specific systems for clinical pathology laboratories, blood banks and administrative systems. • Responsible for the company’s IT Master Plan. • Infrastructure and cabling projects planning and coordination. • Events - Responsible for the VII International Congress of the World Apheresys Association (WAA) / XXIII Congresso Brasileiro de Hematologia e Hemoterapia (Hemo98) held at the World Trade Center from November 9, 1998 to November 16, 1998.

São Paulo Area, Brazil

• Responsible for systems development using both MF Cobol and Recital programming languages on IBM/AIX operational system. • Responsible for both maintenance and implementations on the following systems: billing, marketing and advertising, central warehouse, accounting, MIS, DSS and shipping. • Analysis and computerization of manual processes and routines. • Responsible for the branch office located at Vila Maria, interconnecting the servers (RISC/AIX platform) via PL.

São Paulo Area, Brazil

• Responsible for the IT operation on the São Paulo branch. • Leadership on ISO9000 implementation and member of “Qualidade Total Condulli” board. • Responsible for the technology delivery team. • Development and implementation of systems using both Clipper (Novell/DOS) and ZIM (Edisa/HP-UX) programming languages. • Maintenance and updates on MIS, DSS and SMS systems on ZIM programming language. • Manual processes computerization and computerized processes optimization and streamline. • Interconnection of both Ponte Pequena and Taboão da Serra unities via PL. • Responsible for the IT Operations department.

Superior Em Gestão De Processos Gerenciais, Administração

Activities and Societies: Graduado com honras de "Destaque Acadêmico".

Master Of Business Administration - Mba, Propaganda E Marketing, 9.5

Master Of Business Administration (Mba), Information Security, 8.82

Pós-Graduação, Governança Em Tecnologia Da Informação, 8.81

Programmer And Is Analyst, Information Technology

Fundamentos De Ethical Hacking, Computer And Information Systems Security/Information Assurance

3Rd Level - Blackbelt Team, Choy Lay Fut Kung Fu

Activities and Societies: Estudo e prática do estilo Choy Lay Fut de Kung Fu

Panetteria E Pasticceria

Specializzazione In Pizza Napoletana, Gastronomy

Specializzazione In Pizza In Teglia, Gastronomy

Specializzazione In Pizza In Pala, Gastronomy

Specializzazione In Pizza Coliseu Brazil Style Cwf, Gastronomy

Corso Di Base - Arte Bianca Italiana, Gastronomy

Cisa, It