Sara Tomas Email and Phone Number

IT Gonvernence Risk & Compliance Indicator analysisOperational Resilience DomainsRisk management in the field of ICTReporting ICT‐related incidentsDocumentation analysis and preparation of digital operational resilience tests Third‐party risk management in the field of ICTAnalysis and adaptation of data according to DORA (Digital Operational Resilience Act)

- In-depth knowledge of cryptography algorithms and protocols such as AES, RSA, Diffie-Hellman, ECC, and SHA- Management of cryptographic keys, ensuring the coordination of cryptographic ceremonies, such as generation and insertion of transport keys, master keys in HSMs, among others;- Experience with cryptographic tools, technologies and device's OpenSSL, HSM Thales (nshield, Payshield), Microsoft Azzure Cloud and AWS, among other cryptographic platforms such as Fortanix, Signpath and AppViewX- knowledge of cryptographic key management systems and digital certificate management.- Understanding of secure communication protocols like SSL/TLS and SSH.- Excellent problem-solving and analytical skills to identify and resolve security issues.- Strong attention to detail and ability to work under pressure to meet tight deadlines.- Effective communication and collaboration skills to work in a team environment.- Enforcing the organization policies and procedures applying dual control, split knowledge, audit trail and Key separation between application and different environments (Production; Test and Contingency);- My experience has allowed me to develop a solid understanding of the fundamental principles of security and compliance, preparing documentation relating to the processes for operational activities carried out, enforcing the organization's policies and procedures, as well as all documentation also used for compliance audits, such as PCI PIN.

- Key Management (mainly focused on PKI solutions); Support to Cryptographic Key Management and Digital Certificates, ensuring the coordination of Cryptographic Ceremonies;- Operational support on Equipment Safety Management Hardware Security Module (HSM);- Elaboration of documentation to Procedures from operating activities conducted by the Company Security Department;- User management;- Interface between Banking Entities and Swift as a service provider (Service Bureau), guiding the costumers and fulfilling their requirements when joining swift;- Experience in the preparation and accompany of PCI DSS; PCI Card Production Security audits and PCI PIN Security;. As well the SWIFT audit- Provide and elaborate a Business Continuity Plan (BCP)

Services (ATM; POS) monitoring and management; Technical support to ATM and POS suppliers/technicians; Client Support by e‐mail and telephone;Credit / Debit cards transations monitorization;Network Incidents report and assignment;Operation 24x7.

Processing Eurocheques in Portugal and Europe;Processing American Express transactions without card; Management of all processes e.g. make and reveling micro films.