Leonardo Rosso Email & Phone Number

Argentina

Argentina

The Cloud Security Alliance is a non-profit organization formed to promote the use of best practices for providing security assurance within Cloud Computing, and provide education on the uses of Cloud Computing to help secure all other forms of computing.As the Argentina Chapter President I have the objective of managing the chapter, upholding the objectives and bylaws of the CSA Organization.I must take the high level definitions to guide the chapter's strategy and lead the board of directors. I must also provide motivation to the chapter members and rally new members for the chapter.I must oversee all operations of the chapter and communicating the achievements of the chapter.

Argentina

United States

Ciudad Autónoma De Buenos Aires, Argentina

Ciudad Autónoma De Buenos Aires, Argentina

Ciudad Autónoma De Buenos Aires, Argentina

Ciudad Autónoma De Buenos Aires, Argentina

Role encompasses technical and management responsibilities on Information Security and Infrastructure Architecture for strategic customers projects and internal infrastructure.As a Technical Leader I must be able to offer advice on Information Security to all levels of management, while being effective with hands-on involvement on projects.Main responsibilities include:• Coordinate and oversee the quality of the work of a team of five security and infrastructure analysts working on different customers and projects.• Provide direction and steering for the objectives of the Information Technology Infrastructure and Information Security Community of Practice (CoP).• Design and develop processes, detailed procedures, and working templates and tools for information security to be embedded into software development processes and life cycles.• Build material for risk management, security policy management, and security awareness both for customers and for internal use.• Build security awareness, education, and training plans and delivery strategies for different areas andprofessional levels inside the organization.• Prepare and deliver training activities on security techniques and tools meant for embedding security into the SDLC for different professional profiles (e.g. requirements analysts, developers, testers).• Devise the security and infrastructure deployment architecture for different applications on varioussoftware development projects for customers.• Assist the development teams on threat modeling the software and component architecture on different software development projects.• Develop the internal Security Testing methodology, as well as deploying the tools, for providing security testing on all software development projects carried out in the company.• Coordinate and actively perform security testing, vulnerability assessment and penetration testing for customers and internal projects.

Role includes managing policy documents for Strategic Outsourcing clients while providing advice and counsel on interpretations of said security documentation; managing issues related to exceptions, non compliance issues, and security risks accepted by clients; and supporting executive management during internal as well as external audits.Main responsibilities:• Maintain and enhance effective working relationships with the customer in conjunction with the account team.• Actively seek out opportunities to improve the security posture of the account by researching new security technologies / practices and by recommending additional security services as required.• Assist and manage to resolution the closure of security risks (e.g. recommend actions, review plans and monitor progress of remedial actions).• Act as a focal point to account management and delivery teams for all operational security related activities.• Serve as a dedicated focal point for managing security incidents that occur in the customer's environment and provide appropriate SME advice to help resolve matters.• Proactively drive operational compliance on the account with particular focus on IBM and Industry standards (e.g. HIPAA, PCI and SOX)• Understand Security weaknesses on the account and proactively drive through to conclusion action plans to resolve.• Where required oversee, coach and develop security knowledge / activities performed by staff inside and outside of the Security competency.• Provide security-related education to enhance security awareness and knowledge of customer applicable security policies and processes.

• Administer 500+ Windows servers, including problem solving and change implementation.• Secured a position as member of the Disaster Recovery Plan preparation and maintenance team.• Obtained a role as member of the technical planning and coordination for major changes and upgrades team.

• Managed several projects that included developing Disaster Recovery Plans, Business Continuity Plans, network and servers security, managing the full project lifecycle from requirements gathering to final implementation and customer training.• Successfully designed and implemented projects of technology integration, server consolidation and virtualization for customers with heterogeneous environments.• Led a team of technicians assembled to deploy, implement and support several IT projects.• Produced and delivered security awareness, instruction and education services related to the following subject matter:• -> Tools and Practices for Business Continuity Management. (Backup / Best Practices)

Ciudad Autónoma De Buenos Aires, Argentina

• Designed and Implemented project plans that required integration of several technologies, networking equipment and communication equipment.• Tackled security incidents, contained intrusions and malware attacks and outbreaks for several customers.• Produced project documentation.• Guided a team of two junior technicians hired by the enterprise into several implementation projects.• Produced courseware and delivered education services on the following subject matter:• Tools for Threat Management. (Antivirus / AntiSpam / Content Management)• Tools for Business Continuity Management. (Backup)• Additional: Implemented and maintained the corporate local network (2 Microsoft Windows NT / 2000 AD Domains with Microsoft Exchange Server 5.5 / 2000 / 2003 as groupware solution).

Argentina

- Highlights - • Took over two failing projects, won back both clients. • Doubled billable hours from deployment projects in 2001. • Rebuilt Windows domain within first week after rogue admin.- Job Responsibilities - • Manage the corporate network and Domain. (WindowsNT4.0) • Supervise Firewall and Proxy servers. • Assist in Business Continuity and Disaster Recovery plans. • Deploy CA Backup and Threat Management solutions.