Marcal Santos

▪ Spearhead strategic cybersecurity leadership for European organizations across finance and telecom sectors, transforming security challenges into competitive advantages. ▪ Architect and oversee comprehensive compliance frameworks aligned with GDPR, NIS2, and DORA regulations, ensuring resilient and AI-driven security solutions for diverse client portfolios. ▪ Lead enterprise-wide risk assessment initiatives and data privacy strategies, identifying vulnerabilities and implementing mitigation measures to enhance operational excellence and regulatory adherence. ▪ Drive cross-functional collaboration with engineering, legal, product, and compliance teams to integrate agentless technologies and autonomous defense systems across client infrastructures. ▪ Support sales team initiatives by providing technical cybersecurity expertise and regulatory compliance guidance during client engagements and proposal development processes. ▪ Facilitate executive decision-making processes by providing strategic cybersecurity counsel and regulatory compliance guidance to C-suite stakeholders. ▪ Establish robust security governance frameworks that align with European regulatory requirements while maintaining operational efficiency and business continuity. ▪ Monitor and evaluate security performance metrics, steering continuous improvement initiatives across various cybersecurity domains to maximize client protection and compliance posture. ▪ Serve as primary liaison for regulatory compliance matters, coordinating communication between client organizations and European regulatory authorities. ▪ Develop and implement comprehensive security strategies that leverage multilingual capabilities (English, Portuguese, Spanish) to serve diverse European markets effectively. Report to CEO Skills: Strategic Leadership · Regulatory Compliance · Risk Management · Cross-functional Collaboration · AI-Driven Security Solutions · Data Privacy Strategy

At SecureLeap, we're on a mission to make top-tier cybersecurity accessible to growing SaaS businesses. With over two decades of experience in IT security, I've seen firsthand how proper security measures can make or break a company's success. How I can help you (non-exhaustive list): 🔒 Navigate the complexities of SOC 2 certification 🔍 Identify and mitigate security vulnerabilities 🚀 Implement robust security practices that scale with growth 💼 Train teams on security best practices 🤝 Build trust with clients through demonstrable security measures Many founders get caught up in day-to-day operations, often overlooking critical security needs. That's where we come in. We provide a fresh perspective and a clear roadmap to achieve your security goals without breaking the bank. Our approach is tailored to each client's unique needs. We understand that every SaaS company has its own challenges and growth trajectory. Whether you're preparing for your first security audit or looking to upgrade your existing security posture, SecureLeap has got you covered. I believe in straight talk and practical solutions. If there's a gap in your security strategy, I'll tell you exactly what it is and how we can fix it. Not every company is ready for a full security overhaul, and that's okay. We'll work with you to prioritize the most critical areas and build a plan that aligns with your business goals. Ready to leap into better security? Let's chat about how we can protect your business and accelerate your growth. Information Security is my passion. It's not just about compliance—it's about building a foundation of trust that propels your business forward. [email protected]

▪ Oversaw the global security strategy, safeguarding the data of +200,000 users across several regions. ▪ Strengthen security across services and infrastructure through cross-functional collaboration with engineering, legal, product, and IT teams. ▪ Led the enterprise-wide risk assessment initiatives, identifying potential vulnerabilities and implementing mitigation strategies to manage identified risks. ▪ Monitoring of performance metrics, steering continuous improvement initiatives across various security domains to enhance efficiency and effectiveness. ▪ Contributed to strengthening the engineering process by actively participating in architectural evaluations, ensuring high standards of quality and security. ▪ Implemented advanced tools and methodologies, driving the achievement of high levels of security certification and bolstering the organization's cybersecurity framework. ▪ Collaborated with the IT team to implement security controls across 800 devices. ▪ Acted as the primary liaison for security topics, facilitating communication and coordination between Aircall and regulatory authorities worldwide. ▪ Develop, train, and mentor the Information Security team to enhance their technical skills. ▪ Spearheaded third-party vendor assessments to evaluate and manage risks associated with external partners. ▪ Led the implementation of Business Continuity initiatives, ensuring the uninterrupted service of critical processes. Report to CIO (Chief Information Officer) Key Achievements: ✅ Achieve Aircall's first SOC2 Type 2 Certification to Boost Deals. ✅ Introduced a company-wide cybersecurity awareness program, reducing phishing susceptibility by 65%. ✅ Establishing a security function from the ground up.

▪ Collaborate with cross-functional teams to provide strategic cyber security guidance and support product initiatives. ▪ Championed the implementation of PCI certification, strengthening the company's reputation and positively impacting its Annual Recurring Revenue (ARR). ▪ Developed information security policies aligned with business objectives, driving significant improvements. ▪ Led the creation of an inclusive incident plan and tools, overseeing company-wide incident response. ▪ Implemented and managed a vendor review process to ensure alignment with Talkdesk Security Posture ▪ Support the Implementation of ISO 27000 Certification and establish key security controls. Report to Senior Information Security Director Key Achievements: ✅ Spearheading Talkdesk Initial PCI Level 1 Certification to Bolster Sales Performance ✅ Create and Coordinate business continuity measures during the initial phases of the COVID-19 pandemic, ensuring the company remained unaffected and maintained high availability.

▪ Led IS program management, overseeing policies and reporting, collaborating with business leaders for security understanding, and managing Security Events. ▪ Led the Brazilian AISO program ( team of 100 professionals) ensuring the secure operations of banking platforms ▪ Executed IS awareness initiatives and global training management, including presentations and stakeholder engagement. ▪ Served as LATAM IS Awareness SME, offering expert guidance, project oversight, and representing the Head of Information Security. Report to Brazi Head of Security (BISO) Key Achievements: ✅ Citi ISO of Year - 2015 (Global Citi Award). ✅ Conducting a Nationwide Awareness and Training Month for Over 4000 Employees. ✅ Support Successfully and Securely Executing the Divestiture of Citi Branches to Itaú.

▪ Achieved exceptional growth over 14 years from Technician to Senior Security Analyst, leading international information security governance efforts, managing assessments, and temporarily overseeing security in Itaú Miami. ▪ Spearheaded diverse security projects, from awareness initiatives for thousands of employees to policy creation for multiple countries, while actively contributing to committees and driving business improvements. Report to Security Governance Manager (Last Position)