Guilherme Franco Email & Phone Number

Brazil

Rio De Janeiro, Brazil

Leading an IAM team to ensure effective Identity and Access Management (IAM, CIAM).Defining and operating IAM structures across Google Cloud Platform (GCP), AWS Cloud, and Azure Cloud to enhance security measures.Managing Privileged Access Management (PAM) to safeguard critical assets and data.Overseeing a modern SaaS-based Identity Security solution (SailPoint IdentityNow) for streamlined access control.Utilizing scripting skills in PowerShell and Python to automate tasks and improve operational efficiency.

Leading a team to ensure effective security operations and incident response.Defining and implementing a threat intelligence process to enhance security monitoring capabilities.Managing rules and administration of the Checkpoint Firewall for network security.Administering Splunk SIEM for log management and security event correlation.Implementing and overseeing the vulnerability management solution Tenable.io to identify and remediate security vulnerabilities.Providing guidance on threat mitigation techniques, Enterprise Vulnerability Management processes, and developing incident response playbooks.Presenting security-related results and recommendations to the Executive Board, Risk Committee, Audit Committee, and Board of Directors.Collaborating with business and technical stakeholders, suppliers, and company board members to align security initiatives with business goals.Operating phishing awareness campaigns to educate employees and reduce security risks.

Project management and Implementation including, Design and Architecture;Work with Operational team in specifying technical requirements for Access Request forms in idM and ensure the right architecture/design is implemented in enabling for the businessProvide ongoing advice on compliance with the Brazilian General Data Protection Law, the GDPR;Specifying guidelines and supporting processes for integration, administration and maintenance;Interaction with application teams that manage major user repositories and/or need to automate/standardize user access request process, to gather requirements, design and deliver solution to integrate with company idM implementation;Gather requirements and Guide / recommend the right integration pattern for applications needing services, taking into consideration the impact to the environment and standards set in company.Recommend improvements, corrections, remediation or requirements for associated projects;Create and maintain documentation for security related activities and metric reporting;

Rio De Janeiro E Região, Brasil

Provide technical direction, support, and guidance to project teams;Support the Information Security Program which includes but is not limited to IAM, Data Protection, Infrastructure and Network Security, Cyber Threat Management and Vulnerability and Patch management;Review and complete detailed risk assessments on new technologies and solutions;Assess, identify and escalate issues appropriately;Identify and work with cross functional organizations towards resolving security issues;Develop and validate baseline security configurations for operating systems, applications, and networking and telecommunications;Perform control, compliance and vulnerability assessments (including third parties) to identify, assess, and solve potential control weaknesses;Establish priorities and long term objectives on the basis of information security risk;Develop and implement strategies to reduce the overall risk exposure of the company, in line with our corporate risk appetite;Partner with departmental management to ensure business needs are met from a security perspective without compromising the company’s security requirements;Develop strategy and approach to adopt changing technologies that benefit company business;Works on RFPs, addressing internal and external security, compliance and audit request;Security review on policy, baselines standards and best practices to business functions and end users.

Define, develop, implement and manage standards, policies, procedures, and solutions that mitigate risk and maximize security;Ensure technology, processes, and governance are in place to monitor, detect, prevent, and react to both current and emerging technology and security threats;Responsible for provisioning access requests by validating the approval, user profile and role definition to ensure all users are provided appropriate access;Ensure IAM services are provided to end-users according to security and compliance processes;Ensure certificate management through key/certificate life cycle;Hands-on deployment and configuration experience with Mcafee Enterprise Suite (VirusScan, DLP, IPS, ePO) and Nessus;Provide mentoring and cross training;Provide executive management a view of the information security risk posture and profile recommending areas of focus based on current;Stay up to date on trends and issues and communicate to leadership security issues and recommendations in clear business terms;Work with internal and external auditors to assess security controls;Configure the vulnerability scanning solution for the number and type of assets scanned;Monitor scans to ensure correct execution and performance;Produce reports of scan results and provide guidance on remediation activities;Provide timely status, metrics and reports;Work to ensure compliance and risk is managed.

Design standards, policies, procedures, and solutions that mitigate risk and maximize security, service availability, efficiency and effectiveness;Provide technical leadership in the assessment and design of security and IT risk solutions;Consistently deliver quality client services. Drive high-quality work products within expected timeframes and on budget;Monitor progress, manage risk and ensure key stakeholders are kept informed about progress and expected outcomes;Foster relationships with client personnel to analyze, evaluate, and enhance information systems to develop and improve security at proceduraland technology levels;Assist with cultivating and managing business development opportunities;Develop appropriate risk treatment and mitigation options to address security risks identified during security review or audit;Provide knowledge sharing and technical assistance to other team members.

Network Management, Information Technology

Ethical Hacking Memory Corruption

Ethical Hacking Penetration Testing

Ethical Hacking Mobile Application Pentesting

Ethical Hacking Post Exploitation

Exin Ethical Hacking E Comptia Pentest+

Comptia Security+ 501

Secure Programming Foundation

Privacy & Data Protection Foundation

Exin Privacy & Data Protection Practitioner - Curso Oficial Clavis

Ccsa - Check Point Certified Security Administrator

General English, General English Language Studies

Data Loss Prevention Endpoint Administration (Dlp)

Network Data Loss Prevention Administration (Dlp)

Microsoft Certified Solutions Associate (Mcsa), Windows Server 2003

Mcp (Microsoft Certified Professional), Windows Server 2003