Murillo Nunes Email & Phone Number

São Paulo, Sp, Br

São Paulo, Brazil

As a Subject-Matter Expert (SME), I perform the following tasks:Information Security Risk Assessment consulting:- Consult on the evaluation of information security risks, aiming to identify and manage risks, providing support to teams, and assisting managers in prioritizing necessary actions to reduce these risks to acceptable levels.- Support teams in the risk perspective of deliverables, seeking to develop security practices by incorporating them into the product/project… Show more As a Subject-Matter Expert (SME), I perform the following tasks:Information Security Risk Assessment consulting:- Consult on the evaluation of information security risks, aiming to identify and manage risks, providing support to teams, and assisting managers in prioritizing necessary actions to reduce these risks to acceptable levels.- Support teams in the risk perspective of deliverables, seeking to develop security practices by incorporating them into the product/project design lifecycle and translating security requirements and conditions into delivery needs/activities.- Evaluate information security risks for IT exceptions, such as firewall rules, browsing filters (Proxy), hardening, GPO, antivirus, and user privileges.Bureaucracy reduction:- Map scenarios eligible for automatic approval in routine needs, with known risks and sufficient compensatory controls to reduce the volume of tickets.- Support the InfoSec Architecture in enabling the implementation of the Endpoint Privilege Manager to remove local admin privileges and ensure the principle of least privilege.Process improvement and lead time reduction:- Integrate InfoSec and IT activities into a unified workflow to simplify the internal customer journey.- Establish the Analytics Core to standardize and industrialize intelligence services in the area, defining procedures for requesting analyses and insights.- Create operational and managerial dashboards using Tableau.- Participate in the Internal Audit process, highlighting process improvements while adhering to guidelines and policies. Show less

São Paulo, Brazil

I was responsible for the following activities:- Perform business process maturity analysis.- Develop and implement PIMS (LGPD - Brazilian Data Protection and Privacy Law) and Corporate Information Security Policy.- Conduct gap analysis and compliance assessments (ISO 27K standards).- Perform data privacy impact assessment (DPIA).- Define security architecture requirements for software product and service development.- Engage in risk analysis across all company… Show more I was responsible for the following activities:- Perform business process maturity analysis.- Develop and implement PIMS (LGPD - Brazilian Data Protection and Privacy Law) and Corporate Information Security Policy.- Conduct gap analysis and compliance assessments (ISO 27K standards).- Perform data privacy impact assessment (DPIA).- Define security architecture requirements for software product and service development.- Engage in risk analysis across all company environments to mitigate potential security issues, including monitoring, creating alerts, analysis, process adjustments, and incident reporting. Show less

Goiânia, Brazil

I was responsible for the following activities:- Collect information from stakeholders to develop technological solutions that meet the specifications of the NECOS project.- Implement customized software and systems to meet the project's demands.- Execute PoC involving SDN and IoT solutions and platforms with RNP and CPqD.- Identify and report potential factors that may compromise project deliverables.- Contribute to the development of new concepts and solutions for resource… Show more I was responsible for the following activities:- Collect information from stakeholders to develop technological solutions that meet the specifications of the NECOS project.- Implement customized software and systems to meet the project's demands.- Execute PoC involving SDN and IoT solutions and platforms with RNP and CPqD.- Identify and report potential factors that may compromise project deliverables.- Contribute to the development of new concepts and solutions for resource slicing (slicing) in computational and network resources for the Cloud.- Install and operate high-performance equipment, such as Dell, HP, and IBM servers, as well as Brocade, Extreme, Datacom, AsGa, and Pronto switches. Show less