Ygor Moretti Email & Phone Number

Rio De Janeiro, Brasil

São Paulo, Brasil

CertSimples is an IT consulting company specializing in supporting clients with infrastructure and security solutions. There, I have successfully led a team of 10 professionals to deliver high-impact projects and maintain strong client relationships.Key Responsibilities:Security Project Management: Spearheaded critical security projects, including a comprehensive network and security retrofit for over 100 clinics implementing Fortinet services, deploying endpoint protection solutions, and integrating Datadog for observability in GCP cloud-based applications. Initiated the structuring of the FinOps area to optimize security-related financial operations, significantly improving client security posture and operational efficiency.Client and Supplier Relations: Developed and maintained strong relationships with clients and suppliers through effective account development and management. Ensured sustained business growth and client satisfaction by implementing robust security measures and maintaining high standards of data protection and compliance.Performance Optimization: Monitored daily security activities and mentored team members to maximize performance. Implemented strategies to motivate employees and enhance their security expertise, resulting in increased productivity and engagement.Employee Onboarding and Training: Successfully onboarded new employees, providing comprehensive training in security best practices and tools such as JumpCloud (Open Directory Platform). Ensured seamless integration into the team, leading to a well-prepared and cohesive workforce adept at managing security threats.Resource Planning and Budgeting: Accurately planned and budgeted for security resources to ensure smooth business operations. This included forecasting needs for security tools and technologies and managing budgets to align with business objectives and enhance overall security infrastructure.

Campinas, São Paulo, Brazil

As leader of Information Security at TAG, I led an 8-member team, addressing several key challenges and initiatives:Key Responsibilities:Team Structuring: Defined the mission, scope, and operating model for the InfoSec team. Successfully built the team through effective recruitment and selection.Policy Development: Established the first policies, standards, and processes for the InfoSec area, ensuring compliance with BACEN circulars and normative guidelines.Regulatory Compliance: Ensured compliance with SOx and LGPD. Supported Corporate and IT Governance, Compliance, and Internal Auditing functions.Security Implementations: Deployed critical security services including CrowdStrike, Netskope (SASE/CASB), SIEM, KnowBe4, and Tenable. Enhanced cloud services adherence to best practices.Security Testing: Conducted penetration tests and internal/external vulnerability scans to identify and mitigate security risks.

Rio De Janeiro Area, Brazil

Zoop is a Fintech Enabler providing financial services and payment solutions. I initially joined to lead the NOC team and transitioned to the Information Security team within two months.Key Responsibilities:Security Team Building: Built and led a 7-member security team, significantly enhancing the company's security posture by implementing advanced security measures and fostering a culture of vigilance.PCI-DSS Certification: Improved PCI processes and successfully achieved PCI-DSS re-certification, ensuring compliance with stringent payment security standards and protecting sensitive financial data.Regulatory Compliance: Ensured strict adherence to Central Bank circulars and GDPR (LGPD), aligning company policies with local and international regulatory requirements to maintain data integrity and privacy.Incident Response: Implemented robust security and fraud incident response processes, enabling swift identification, containment, and resolution of security incidents to minimize impact on operations. Initiated a comprehensive security awareness training program, educating employees on best practices and emerging threats to foster a security-conscious workforce.Strategic Planning: Developed strategic business plans for IT resource needs, focusing on security infrastructure. Coordinated secure system access for users, ensuring robust access controls and minimizing vulnerabilities. Deployed advanced security solutions such as CrowdStrike, Tenable, JumpCloud, and Netskope, enhancing the company's ability to detect and respond to threats.Network Operations Support: Oversaw critical improvements to support network operations, minimizing downtime and enhancing security measures through close collaboration with other departments. Implemented a detailed security and fraud incident response process, ensuring prompt and effective handling of security breaches to protect company assets and maintain operational integrity.

Rio De Janeiro Area, Brazil

As tech leader of technology at Folha Dirigida, I was responsible for leading the transition of the company to a digital platform. I led the development team and managed the production environment, facing several key challenges.Key Responsibilities:Digital Transformation: Spearheaded the initiative to transition Folha Dirigida into a fully digital company, enhancing its digital platforms to improve user experience and engagement.Team Leadership: Led the development team, restructuring processes to increase efficiency and collaboration.Technology Strategy: Developed a comprehensive technology strategy to guide future business investments and ensure alignment with organizational goals.Operational Support: Supported the day-to-day technology operations of Folha Dirigida, ensuring smooth and reliable performance of all digital services.Key Achievements:Platform Improvement: Significantly improved the functionality and performance of FDO's digital platforms, resulting in increased user satisfaction and engagement.Process Optimization: Rebuilt development team processes, leading to enhanced productivity and streamlined workflows.Strategic Planning: Prepared a well-defined technology strategy that positioned Folha Dirigida for future growth and technological advancements.

Rio De Janeiro Area, Brazil

Stone Payment is one of the top 5 acquirers in Brazil, with four data centers in the USA. As the Infrastructure Manager, I led and supported the Infrastructure team, overseeing servers (hypervisors, storage, and operating systems), databases, automation, network, and security.Key Responsibilities:Data Center Management: Led the migration of data centers, ensuring minimal downtime and operational continuity.PCI-DSS Certification: Managed the process to achieve and maintain PCI-DSS certification, ensuring compliance with industry standards.IT Process and Planning: Developed and implemented IT processes, including planning for high-traffic events like Black Friday.Infrastructure Integrity: Tested network performance and created strategies to maintain the integrity of the overall infrastructure.Employee Onboarding and Mentoring: Provided onboarding and mentoring for newly hired employees, fostering a positive and productive work environment.Stakeholder Communication: Worked in team-driven environments and communicated effectively with stakeholders to align IT initiatives with business goals.Security Management: Installed and managed VPNs, firewalls, and anti-malware solutions to secure the network.Troubleshooting and Maintenance: Identified and resolved server hardware and network system issues, ensuring continuous operation.Lifecycle Management: Managed the lifecycle replacement of hardware and software in data centers, maintaining up-to-date and efficient systems.Key Achievements:Successfully migrated data centers with minimal downtime.Achieved and maintained PCI-DSS certification.Improved network performance and infrastructure integrity.Enhanced employee onboarding and development processes.

Rio De Janeiro Area, Brazil

As first and main duty I was responsible for decommissioning all Rio2016 infrastructure that was in the Embratel's Datacenters .Coordinate a new information security team responsible for introducing security policies and processes, evaluate the current environment and apply pertinent corrections to ensure business continuity and attendance of corporative objectives.

Rio De Janeiro Area, Brazil

Hired as a Security Analyst for Rio2016, I had the opportunity to contribute to one of the world's largest events. I was responsible for planning and implementing initial security measures and tools. Later, promoted to Security Specialist, I participated in the planning of Rio2016's backbone and security architecture. As the event neared, I shifted to an operational role, leading a 24x7 security defense team of over 15 members until the end of the games.Key Responsibilities:Regulatory Compliance: Managed information system regulatory compliance to meet updated guidelines.System Security: Contributed to system road-mapping, design, and launch services to address information vulnerabilities.Security Implementations: Implemented VPNs, firewalls, IPS solutions (Cisco and Paloalto), intrusion detection systems, and anti-virus software. Deployed endpoint protection (Symantec) and monitored virus reports to update protection systems as needed.Incident Response: Investigated and resolved incidents of unauthorized access to sensitive information, conducted security audits to identify vulnerabilities, and developed mitigation plans.Collaboration and Remediation: Partnered with IT department members to minimize system exploits, consulted with team members to assess root causes of security flaws, and planned for remediation.Access Control: Monitored the use of data files, regulated access to protect secure information, and reviewed violations of computer security procedures.Team Leadership: Led a 24x7 security defense team of more than 15 people during the operational phase of the event, ensuring the security of applications and systems.Key Achievements:Successfully implemented and managed security measures for one of the largest global events.Developed and executed a robust security architecture and backbone for Rio2016.Effectively led a large security defense team, ensuring the integrity and security of the event's IT infrastructure.

Rio De Janeiro Area, Brazil

Working as Security Analyst (Senior) at Rede D'or I was hired to evaluate the IS infrastructure's maturity process. After its first evaluation I was responsible design projects to improve the IT infrastructure and operate (in a first moment) all security devices.Projects designed to 2011/2012:• Generate Network Documentation - Create Topologies (sites, backbone, security), bayface, technical Procedures, etc.• Hardening Network Devices - Review all device's configuration to improve te security.• Implementation of a RSyslog Server - Unify logs of all devices (Network and Security) into one device.• Backup Routines - Acquire Backup software and hardware and outsource the Backup Routine and Services.• Proxy Migration - Migrate the old proxy infrastructure to a new one. Re-designing the infrastructure, creating DMZs to external access.• Information Security Policy - Info Sec Policy Group member: responsible to design the IS Policy.

Rio De Janeiro, Brazil

Working as IP Network Analyst (Senior) at TIM Customer dealing with Security Area, working with Service and VPN firewalls (about 7 Cisco ASA, 30 Checkpoint Cluster using Nokia IPSO, SecPlat, Solaris OS's). Like in Vivo, it was necessary to work on call during an entire week per month in order to support TIM’s equipment and services.

Rio De Janeiro, Brazil

Working as IP Network Analyst at NEC Brasil S/A. I’m located at Vivo Customer dealing with Security Area, working with Service and VPN firewalls (about 14 between ASA, appliance with Checkpoint and Unix System).It was necessary to work on call in order to attend internal user’s requests with some kind of VPN access issue or even a Network Intrusion. Now I'm in charge of 4 projects (on going): - McAfee IDS & IPS Implementation. - NAC (Network Access Controller) Implementation. - Inventory regularization. - Backup Documentation.

Working as CSA (Customer Service Analyst), my job is to give back-office support to CSMs (Customer Service Managers), providing automated and customized customer reports (QoS), keeping customer’s diagrams always updated, analyzing network flow, measuring RTD, equipment availability and access load for WAN and LAN segments, managing network changes and maintaining its network data integrity (using data collected from Cisco routers, Passport and DPN-100 Layer-2 switches).Working as LCM CNM VPI (Implementation Team) I had the opportunity to configure Cisco Routers & Switches and Nortel Contivities equipments.I’ve worked with the following services in the Implementation Team: Voice Over IP, CAS & NAS Routers, Routing Protocols (OSPF, BGP, EIGRP, etc.), Major Critical Services.I’ve worked in some Implementation Projects like Perdigão and Merial.Three months ago I’ve moved to SMBO – Team responsible to support SITA Client that manages all Airlines Companies (Varig, Amer. Airlines, Emirates Airlines,…). There as VPN owner I was responsible to perform complex implementations & changes scenarios involving Cisco routers.

Rio De Janeiro, Brazil

Working as Support Analyst, I was responsible for performing servers backup (using Brightstor ArcServer v.11); giving Desktop and LAN support; Siemens Hipath 3750 PABx maintenance and basic configuration; using Siemens Call Report (later replaced by Sumus Tarifador) to generate customized reports. Later, as Network Administrator I was responsible for implementing and managing Windows Active Directory (Win Server 2003), creating and managing users, e-mail accounts (Exchange 2003) and file server permissions; troubleshooting Windows Server 2003 and Exchange 2003. I was also responsible for the Exchange 2003 Server (running Windows Server 2003) implementation. I used to manage around 500 users accounts and mailboxes. I managed day-by-day Exchange activities and problems, and implemented network security for local users. On support coordination, I managed projects like policy improvement and printing outsourcing (Ricoh).

Rio De Janeiro, Brazil

Working as Service analyst I was responsible to monitor all OI's services.

Bachelor Of Technology - Btech, Computer And Information Systems Security/Information Assurance

The specialization course in Information Security and IT Management aims to train managers in the area of information technology.

Processamento De Dados, Information Technology

Data Processing