Elton Morais, CCISO

Responsible for overseeing cybersecurity operations, ensuring ISO 27001 compliance, and managing managed security services. My key responsibilities include: Leading and optimizing a Security Operations Center (SOC) to respond to critical incidents. Implementing risk mitigation strategies and continuously improving security processes. Monitoring hybrid environments and developing proactive solutions to safeguard digital assets.

As a seasoned Cyber Security Advisor, I bring expertise in governance, risk, compliance, data protection, and security operations. My recent roles as Data Protection Officer (DPO) and SOC Coordinator have enriched my skills in cybersecurity. Key areas of my expertise include: Governance, Risk, Compliance (GRC): I have a robust foundation in GRC frameworks, effectively navigating GDPR and HIPAA regulations. As DPO, I ensured compliance with data protection laws, conducted risk assessments, and implemented risk management strategies to safeguard data. Information Security Controls and Audit Management: I excel in implementing security controls and managing audits. Familiar with NIST and CIS Controls, I oversaw audit management as SOC Coordinator, ensuring adherence to protocols and continuous improvement. Security Program Management & Operations: My experience includes managing security operations and projects tailored to cybersecurity. As SOC Coordinator, I led a team of analysts, ensuring timely incident response and comprehensive security training. Information Security Core Competencies: With in-depth knowledge of cryptography, network security, and application security, I stay updated on the latest threats and vulnerabilities, maintaining strategies ahead of emerging risks. Strategic Planning, Finance, Procurement, and Third-Party Management: I possess a strategic mindset, expertise in financial planning, budgeting, cost-benefit analysis, procurement, and vendor management, ensuring effective cybersecurity solutions.

ABRASECI, Brazilian Association for Cyber ​​Security, officially founded on February 21, 2020, is a non-profit class entity that defends the interests of companies and professionals in Cyber ​​Security (Digital Security, Information Security and Data Security) in Brazil. For more information: https://www.abraseci.org.br/

- Structuring, managing and improve the security team. - Creating internal security processes. - Build, updating and maintaining of documents and normative procedures in corporative security. - Applicability of corporate security controls based on regulatory system from Brazil (CVM) and ISO 27001 - Implementing SLA and metrics from security team. - Security protection over cloud (AWS & Azure) and on-premise environment. - Security cost control aligned with business Conducted necessary projects like: - Risk mitigation strategy - Access Management - Internal vulnerability assessment - Edge and endpoint security protection - Security awareness strategy implementation - Threat Intelligence strategy implementation

- Leadership of Maturity Assessment Projects: I have successfully led multiple projects focused on assessing the cybersecurity maturity of organizations. By conducting comprehensive evaluations, I provided valuable insights into their existing security posture, identified gaps, and recommended strategic improvements. - Risk Analysis and Implementation of Process and Technology Recommendations: As a Senior Cyber Risk Advisor Consultant, I have performed thorough risk analyses, considering both process and technology aspects. Based on the findings, I have developed tailored recommendations to enhance information security, encompassing policies, procedures, and technological solutions. - Team Leadership in the Field: I have demonstrated strong leadership skills by effectively leading cross-functional teams in the field. I fostered collaboration and ensured cohesive efforts, resulting in successful project outcomes and client satisfaction. - Coordination of Tactical-Operational Activities: I have excelled in coordinating tactical-operational activities to address immediate security concerns. This includes incident response management, vulnerability remediation, and the implementation of security controls aligned with industry best practices. - Provide Internal Training: I have actively contributed to knowledge sharing and skill development within organizations by providing internal training on various cybersecurity topics. I have designed and delivered tailored training sessions to educate employees about potential risks, security best practices, and incident response protocols. With proven team leadership abilities and expertise in coordinating tactical-operational activities, I ensured effective execution of security initiatives. Additionally, my commitment to knowledge transfer through internal training enhances organizations' overall cybersecurity posture.

I am an experienced Security Analyst L3 with expertise in vulnerability analysis, threat management, and network security. With a deep understanding of information risk and the latest security threats, I provided valuable insights through detailed security reports. I validate network security schemes and constantly monitor for vulnerabilities and potential risks. Proficient in various IT security tools, like: - I manage firewalls (Palo Alto, Juniper), - IPS (HP TippingPoint), antispam (ESA CISCO C170), - Proxy (WSA CISCO S360, McAfee Web Gateway Proxy), and - Utilize Zabbix for network monitoring. Additionally, I specialize in implementing and managing endpoint antivirus solutions such as Kaspersky and Symantec. Key Skills: 1. Vulnerability Analysis 2. Threats and Information Risk Management 3. Security Reporting 4. Network Security Scheme Validation 5. Constant Security Threat Monitoring 6. Firewall Management (Palo Alto, Juniper) 7. IPS Management (HP TippingPoint) 8. Antispam Management (ESA CISCO C170) 9. Proxy Management (WSA CISCO S360, McAfee Web Gateway Proxy) 10. Network Monitoring (Zabbix) 11. Endpoint Antivirus Solutions (Kaspersky, Symantec)

Information Security Instructor in subjects such as: - Hardening on Linux Servers - Vulnerability Analysis Techniques on Servers - Penetration Test techniques in networks, services and servers.

Experience: Server Infrastructure Analyst - Linux Server Administration: I have gained extensive experience in administering Linux servers, including installation, configuration, and ongoing maintenance. I am proficient in managing user accounts, implementing security measures, and troubleshooting server-related issues. - Infrastructure Analysis: As a Server Infrastructure Analyst, I have been responsible for analyzing and assessing the organization's infrastructure needs. I have conducted thorough evaluations to identify areas for improvement and recommend optimal server configurations and upgrades. - Server Availability: Ensuring high server availability has been a key focus of my role. I have implemented robust monitoring systems to proactively identify potential issues and minimize downtime. Through proactive maintenance and timely interventions, I have achieved and maintained high server availability rates. - JBoss: I have gained expertise in working with JBoss application server, including installation, configuration, and deployment of Java-based applications. I have successfully managed JBoss instances and optimized their performance for efficient application delivery. - Team Collaborator: Collaboration and teamwork have been integral to my role as a Server Infrastructure Analyst. I have effectively collaborated with cross-functional teams, including developers, network administrators, and business stakeholders, to ensure smooth server operations and alignment with organizational objectives. Key Skills: 1. Linux Server Administration 2. Infrastructure Analysis 3. Server Availability Management 4. JBoss Application Server 5. Team Collaboration With my ability to collaborate effectively within teams, I am confident in contributing to the success of server infrastructure projects and ensuring seamless operations.

- Experienced IT Security Analyst proficient in: - Kaspersky Endpoint Security - User support - Physical and virtualized server installation and configuration - Printer administration - Internet link monitoring (MPLS & Internet) - Skilled in analyzing security threats, providing user support, and ensuring secure server operations. - Adept at configuring printers and monitoring Internet links for uninterrupted connectivity. - Possess strong analytical and problem-solving abilities. - Expertise in security best practices and network infrastructure management. - Key skills: Information Security Management, User Support, Server Installation and Configuration, Printer Administration, Internet Link Monitoring. Committed to enhancing cybersecurity initiatives and contributing to organizational success.