About Me
Hello
With nearly one and a half decades working for/with a number of global enterprises in several countries, my current strongest interest and field of expertise (in which I have accumulated extended work experience) revolves around information security, including the analysis of processes, procedures, systems and environments, identification of vulnerabilities and corrective action, data governance, implementation or standards and technologies assuring conformity with security regulations and frameworks, and risk management.
Industry best-practices and regulatory guidelines are always present as a means to frame the work I produce, namely:
- ISMS: ISO/IEC 27001, ISO/IEC 27002, ISO/IEC 27004
- Risk Management: ISO/IEC 31000, NIST SP 800-37, NIST SP 800-30, NIST SP 800-53, NIST SP 800-171, COBIT
- Disaster Recovery: ISO/IEC 27031
- Data Protection: GDPR, HIPAA, ISO/IEC 27799, PCI-DSS
- ZTA (Zero Trust Architecture): NIST SP 800-207
I also rely heavily on knowledge acquired during training for the CEH, CISSP and CBCI certifications.
Additionally, also within the security domain, I have vast experience in the conception and testing IT Disaster Recovery plans (including critical infrastructures for clients within banking, security and medical industries) relying of a large number of technologies, both bespoke and from different vendors.
As a former infrastructure architect and, earlier on my career, infrastructure engineer, I also have extended skills and hands-on experience the design and implementation of technical infrastructure solutions, including infrastructure (datacentre) virtualisation and cloud migration, VDI, and environment consolidation, centralisation, standardisation, hardening and upgrading.
I also have significant experience in infrastructure project management following the Prince2 methodology, as well as developing strategies, processes and procedures, document authorship, and conformity analysis concerning enterprise policies, regulations and industry best-practices, in alignment with the regulations and frameworks mentioned above.
I speak and write four languages fluently: English, Portuguese, Spanish and French.
Please feel free to download the resources presented, consisting mainly of training material and consolidated information about a number of topics related to my areas of expertise.