Marcelo Rodrigues Email & Phone Number

IT Auditor professional experienced in the following areas:•Cybersecurity Assessments;•IT Security;•IT Maturity;•Application Controls;•Segregation of Duties(SoD);•Computer Assisted Audit Techniques (CAAT);•Information Technology General Controls(ITGC´s);•Risk Management.Professional competences:Team leader: Manage and motivate staff to hit goals, be part of the culture;Experience in ISO 27001 implementation;COBIT and ITIL framework knowledge gained in CISA, CISM and ITIL certifications;Handled ERP, Network, Operating System, Database, and Application Audits for different projects;IT policies creation according best practices;Disaster Recovery Planning and Business Continuity Management;Security Awareness;Audit experience in the following systems/technologies: Mysql, Oracle, MS SQL, Windows, Linux, AS400, SAP, Navision, BAAN, Mongo, JDE;SLA’s, KPI analysis;Cloud computing services (IaaS,PaaS and SaaS) and models (private, public, hybrid);Experience in data centre migration (assessment, design project plan, evaluate implementation).IT Security:Strong knowledge of Active Directory/LDAP and RADIUS as well as network monitoring, log management, correlation, intrusion detection, and threat monitoring with the ability to perform detailed root cause analysis.Experience with PCI-DSS Compliance, NIST CybersecurityProficiency with Burpsuite, Nmap, Nessus, and Metasploit vulnerability scanning tools.Understanding of TCP/IP, networking concepts, and services such as DNS, SMTP, HTTP, HTTPSKnowledge of network protocols and common vulnerabilities and attack vectors, including OWASP Top 10SOX AuditFocused on key operational, accounting, and financial reporting controls within the assigned areas and scope for SOX reviews. ITGC AuditCreate and maintain Audit program. Discuss results with the client. Coordinate teams to execute field work.Experience in Production/Manufacturing, Consumer Goods, Automotive, Engineering and Technology industry sectors.

Listed skills include Cisa, Auditing, Information Technology, Information Security, and 35 others.