• Acting as a specialist consultant within the information security team, providing technical and strategic support to the business.• Handling and analyzing incidents, requests, and changes, actively participating in War Rooms and proposing continuous improvements in security architecture and processes.• Evaluating threats, risks, and security requirements for on-premise and cloud projects (AZURE, GCP, AWS), ensuring compliance with internal policies and international standards.• Conducting supplier risk assessments, security tests (Pentests), non-compliance analysis, and preparing executive reports.• Providing technical mentorship and client support on security-related issues, while orchestrating time and demand management to optimize service operations.• Serving as the Information Security (IS) focal point within the business, acting as a facilitator between business demands and security requirements, ensuring strategic alignment.Key Projects:• Auto 2.0 Project: Participation in releases 2 and 3, integrating technological and security improvements from the design phase, ensuring data protection and regulatory compliance.• Vistoria Prévia Project (Phases 2, 3, and 4): • Phase 2: Technological upgrade with a focus on security. • Phase 3: Implementation of customer-driven inspections, ensuring data protection throughout the process. • Phase 4: Integration with AI, enabling inspections via video, increasing convenience while maintaining high security standards.• MPI Pentest: Technical leadership in refining the Pentest process, developing executive reports, and implementing continuous improvements in the testing and remediation cycle.Throughout this experience, I have established information security as a central pillar of the business, promoting proactive strategies, implementing best practices, and ensuring the ongoing evolution of security controls.

I serve as an Cybersecurity Consultant for Report Security, providing my services outside of business hours. My work encompasses diagnosis, requirements gathering, scope definition, solution development, and project implementation for the client.• I assist in the annual process of defining SOX scope, based on the risks identified in financial statements, at account, process, and system levels.• I conduct Design and Effectiveness tests to ensure the efficiency and effectiveness of SOX controls.• I actively assist in the annual IT risk assessment, including identifying all systems that support key financial processes, evaluating controls (general and application) for the main financial systems, and evaluating and/or developing test procedures.• I maintain the IT Risk Control Matrix to document all key financial systems, controls, and test procedures.• I ensure adequate SOX documentation for ITGC, including IT Risk Control Matrix, ITGC Process Narratives, ITGC testing, problem assessment, and reports.• I identify opportunities and provide support for automation in process controls and ITGC to improve efficiency.• I support the coordination and execution of tests and assessment of IT systems and controls for SOX compliance in a predominantly SAP environment.• I work in conjunction with IT teams and business units to correct control deficiencies.• I assess third-party SSAE 16 (SOC 1) reports for compliance with system control requirements.• I make recommendations for the enhancement of IT system controls and process improvements.