Rafael Issa Email & Phone Number

15+ years of experience in Cybersecurity, most of them in the Energy sector and the last 7 years working dedicated in OT/IACS Security.Responsible to plan, develop and implement ICS Security related projects and technologies. Responsible to develop internal ICS security related Policies, Standards and Procedures in alignment with International standards (IEC 62443, NIST Framework, etc.).Demonstrated understanding of the strategies and fundamental techniques specific to core subjects with an ICS-focus such as network security monitoring, digital forensics and incident response.Development of Cybersecurity technology implementation strategies for ICS environments.Execution of Cybersecurity risk assessments on ICS systems and support with the remediation plan to correct the findings.Support with the creation of technical design documentation, like network architectures and data flows, and to write technical reports for both technical and management consumption and understanding.On the IT arena I have experience with the management and implementation of a large number of solutions/projects including:- Cloud Web Proxy (Zscaler)- Data Loss Prevention (Symantec)- Vulnerability Management (Qualys and Rapid7)- Anti-malware (Symantec Endpoint Protection)- File Server Auditing (Varonis)- Privileged Access Management tools- Patch Management- Splunk- VPN (Cisco AnyConnect)I also have a large experience implementing and managing Information Protection program, including the implementation of a Data Loss Prevention tool from scratch, policy creation, incident analysis, interviews with the data owners, alignment with other business areas and employee's awareness.---------------------------------------- Training and Certifications --------------------------------------Trainings:- SANS ICS410: ICS/SCADA Security Essentials - In person (5 days)- SANS ICS515: ICS Active Defense and Incident Response - OnDemand- Microsoft Azure Security Technologies - AZ-500- Microsoft Azure Fundamentals - AZ-900- Cloud Security Alliance- Rapid 7 - Advanced Vulnerability ManagementCertifications:- SANS GICSP- SANS GRID- Certificate of Cloud Security Knowledge (CCSK)- Microsoft Azure Fundamentals (AZ-900)- Rapid7 Advanced Vulnerability Manager- CompTIA Security+- ITIL V3 Foundation

Listed skills include Firewalls, Itil, Information Security, Sistemas Operacionais, and 27 others.