Emerson Costa Email and Phone Number

GRC Consultant in Information Security specializing in Governance, Risk, Compliance, Privacy, and Data Protection. Working for a Trusted Advisor in Information Security, I focus on collaboration and monitoring to deliver high-impact results.My professional journey includes conducting Compliance and Maturity Assessments in CIS v8/v8.1, ISO 27001, NIST, and BACEN CMN 4.893; Disaster Recovery and Business Continuity projects (including the facilitation of Tabletop Exercises); supporting the implementation and providing recommendations for DevSecOps; Certification Projects; Internal Audits; and presenting results to Managers and Executive Committees. I have expertise in developing and technically reviewing procedures, standards, policies, and plans related to Information Security, Business Continuity, Incident Response, and Privacy, as well as conducting inspections and physical audits.Graduated in Information Security from FATEC São Caetano do Sul, with Executive Training in Cybersecurity from Fundação Getúlio Vargas. Certified by BSI as a Lead Auditor for ISO 27001:2022, in addition to qualifications such as MS 900, CCNA 1 and 2 v7, and Implementation of ISO 31000:2018. I possess solid knowledge in Secure Development, Privacy, and Data Protection (LGPD and GDPR).Proactive, collaborative, and organized, I strive for leadership and critical analysis skills. I am committed to continuous improvement, organization, and communication to deliver results that drive business value.Let’s connect to exchange ideas about Information Security and GRC!