Senior IT, Governance, and Information Security professional
- Location
- Brazil
- Desired Salary
- Unspecified
- Work preference
- Full Time
- Links
- Not set
- Joined
- 27 Aug 2025
- Field / Industry
- Finance & Accounting
About Me
I am a Senior IT, Governance, and Information Security professional with over 15 years of experience specializing in infrastructure, internal controls, and regulatory compliance such as LGPD and GDPR. Throughout my career, I have developed expertise in implementing security frameworks, mitigating risks, and optimizing processes within both corporate and government environments. I combine strong technical skills with a strategic vision to align operations with market best practices and lead complex infrastructure, ERP, and security projects.
My professional journey includes roles where I have successfully led the implementation of internal controls and governance policies, ensuring compliance with standards like ISO 27001 and LGPD. I have a proven track record of conducting process audits, reducing vulnerabilities, and producing strategic reports that support executive decision-making. I am passionate about enhancing security postures and improving operational efficiency through innovative solutions.
I have worked as a Freelance IT & Data Consultant, implementing GDPR data controls for international clients and optimizing network security policies, which significantly reduced security incidents. My experience also includes managing network and server infrastructure, configuring firewalls and VPNs, and leading ERP enhancement projects that improved access control and operational workflows.
In addition to my technical expertise, I hold an MBA in Project Management and a Bachelor's degree in Business Administration, complemented by certifications in data analytics, GDPR fundamentals, and predictive solutions with R and Python. I am proficient in multiple programming languages and data tools, including Java, Python, SQL, R, Tableau, and Power BI.
I am fluent in Portuguese and have advanced proficiency in English. I am committed to continuous learning and professional development to stay current with evolving technologies and regulatory requirements. I am eager to contribute my skills and experience to organizations seeking to strengthen their IT governance and information security frameworks.
Skills
Project ManagementPythonSQLJavaDockerRisk ManagementLeadershipData AnalyticsProcess OptimizationGDPRWindows ServerVMWare
Education
MBA in Project Management
Bachelor's in Business Administration
Microsoft Network Administration
biological sciences
Experience
Led the implementation of internal controls, ensuring regulatory compliance. Conducted process audits and reviewed critical access, reducing vulnerabilities by 30%. Developed governance and security policies aligned with ISO 27001 and LGPD. Produced strategic reports to support executive decision-making.
Implemented GDPR data controls for international clients, ensuring compliance. Analyzed data flows and identified risks, improving security by 25%. Optimized firewall and network policies, reducing incidents by 40%.
Planned and managed implementation projects for information systems and business applications, including business requirements mapping and solution design. Delivered technical reports that improved sales efficiency by 15%. Identified vulnerabilities in corporate systems with 100% proactive resolution.
Managed network and server infrastructure (Windows/Linux), ensuring 99.9% uptime. Configured and maintained firewalls (pfSense, FortiGate) and VPNs, ensuring perimeter security. Led ERP TOTVS Microsiga enhancement projects, including access control, permissions, and customizations for finance and production. Oversaw billing process management, improving operational efficiency. Implemented LGPD policies, avoiding potential fines of up to R$200k/year.
Deployed and maintained structured networks (wired and wireless) for 300+ users. Performed server and computer maintenance (hardware and software), reducing downtime by 40%. Configured firewalls and monitored traffic to block real-time threats. Provided multi-level technical support focused on security and compliance.