Leandro Bennaton

About Leandro Bennaton

I am an award‑winning cybersecurity and regulatory compliance executive with 20+ years leading security for highly regulated industries, from financial services to public sector. I build cloud‑first, cybersecurity programs that reduce risk while enabling growth.At Amazon Web Services (AWS), I lead strategic security and compliance initiatives across the Americas, partnering with C‑suites and regulators to align AWS cloud services with ISO 27001, SOC 2, PCI, HIPAA, GDPR, CCPA and regional frameworks. Former CISO at Terra/Telefónica recognized as Security & Risk Executive of the Year for three consecutive years (2013–2015).Beyond AWS, I help shape the future of digital security as an invited member of the GIAC Advisory Board and as AWS’s representative on the INCITS Executive Board, the U.S. ISO standards body for harmonizing global IT standards. I frequently speak at international conferences on cloud security automation, resilience, and security‑driven continuous compliance innovation.

Experience

1. Sr Manager for Americas Aws Security Stategic Initiatives

   Amazon Web Services (AWS)

   Apr 2025 — Present

   At Amazon Web Services (AWS) develop and lead initiatives for Latin America, Canada, Caribbean, and the United States. Directed teams responsible for building mechanisms to enable regulators, government agencies, and companies spanning industries and verticals to achieve the highest standards of security and compliance in their AWS cloud environments. Provide expert advice in technical fields, including Artificial Intelligence (AI), Cloud Computing, Cybersecurity, Privacy, Regulatory Compliance, and Resilience.

Education

• FEI

  Academic, Electric Engineering, emphasis on Telecommunications

  1997 — 2001

• Massachusetts Institute of Technology

  Cybersecurity: Technology, Application and Policy, Cybersecurity

  2015 — 2015

• IBTA - Instituto Brasileiro de Tecnologia Avançada

  Master of Business Administration (MBA), Information Security Management

  2008 — 2009

• EF Executive Language Institute

  BOSTON, English Language Courses Abroad for Executives

  2015 — 2015

• University of Washington

  Information Security and Risk Management in Context

  2013 — 2013

• SANS Institute

  Strategic Planning, Policy, and Leadership

  2021

• Fundação Dom Cabral

  MDP, Management Development Program

  2009 — 2009

• IBTA - Instituto Brasileiro de Tecnologia Avançada

  Technologist, Database Systems

  2003 — 2005

• SANS Institute

  Managing Cybersecurity Initiatives and Effective Communication

  2022

• SANS Institute

  AWS Secure Builder, Cybersecurity

Skills

• Management
• Disaster Recovery
• Internet Security
• Vulnerability Management
• IT Audit
• Technical Writing
• Security
• Ceh
• Iso 27001
• Physical Security
• Penetration Testing
• Vulnerability Assessment
• Firewalls
• Owasp
• Hardening
• Pci Dss
• Computer Security
• Security Policy
• Incident Management
• People Management
• Information Technology
• Ips
• Security Audits
• Outsourcing Management
• Operating Systems
• Security Awareness
• Security Architecture Design
• Business Continuity
• Cobit
• Information Security Management
• Infrastructure
• Risk Management
• Information Security
• Network Security
• Payment Card Industry Data Security Standard (Pci Dss)
• Data Center
• Mcafee
• High Availability