Silvio D Gomes

About Silvio D Gomes

Experienced cybersecurity professional building and scaling security programs across cloud, endpoint, identity, applications, and automation for enterprise operations. I lead cross-functional programs that improve security posture while enable business growth – specially for fast growing, high-impact environments and modern systems with secure architecture.My focus is a business aligned security program that is approached with layered security strategy, establishing governance and measurable controls, modernizing monitoring and response, and partnering with IT, Cloud, Software Development and Operation to increase security adoption. I combine execution and leadership, able to align stakeholders at executive level while staying close enough to engineering and architects to make calibrated decisions, reduce risk and advise upper executives.Areas I had my feet on past 14 years:Lead teams and security implementation and automation of modern security platforms (SIEM, SOAR, EDR/XDR, Workflows, Visibility, KPIs).Security Operation and Incident Response (detection, triage, containment, recovery, post incidents).Cloud security and automations (Improved Audits, Increased Security and Cost Reduction, Governance and Secure architectures across AWS/GCP/Azure).Secure Software Development, adoption of artifactory systems to control code flaws, IAC misconfiguration and improve visibility in software composition analysis (SCA/SBOM).Scalable Vulnerability Management Programs, great record on mitigating infrastructure and software vulnerabilities for multiple industries.Governance Risk and Compliance, managed and implemented policies, procedures and multiple audits frameworks (ISO-27001, SOC2, PCI) and exposure to privacy regulations like GDPR, LGPD and CCPA.In a mission to grow up in my career and bring valuable contributions for organizations that are building and maturing security programs, improve threat resilience, track risk mitigation and master security automated operations.MBA — Information Security Management.Keywords: Cybersecurity Leadership, Security Program Management, Director of Information Security, Security Operations, Incident Response, Cloud Security, IAM, Zero Trust, SIEM, SOAR, EDR/XDR, Vulnerability Management, Threat Detection, Security Automation, Governance Risk & Compliance, SOC 2, ISO 27001, NIST CSF, PCI-DSS, GDPR.

Experience

1. Information Security Manager

   Euronet

   Mar 2024 — Present · US

   Dedicado à divisão de Jogos, gerenciando a segurança e implementando controles de segurança em múltiplas plataformas de nuvem (aprimorando a segurança, ajustando e auditando os controles), implementação global de hub de segurança, torre de controle e auditorias Prowler. Trabalhando em estreita colaboração com diversas unidades de desenvolvimento para garantir a segurança do software, mitigar vulnerabilidades e assegurar que todos os sistemas criados sejam seguros e confiáveis. Protegendo o código-fonte, a componentização de IAC e as aplicações em produção (SAST, SCA, SBOM e DAST). Contratando, gerenciando e mitigando as descobertas de testes de penetração. Implementando sistemas de auditoria para conformidade com SOC2 e PCI - auditoria, implementação e monitoramento de controles para atender às regulamentações atuais e futuras. Colaboração estreita com a Governança de Jogos para atender a regulamentações como NGCB, Licenciamento e segurança de CMS. Monitorando e aprimorando políticas e correlações de detecção de ameaças, liderando iniciativas para uma operação mais eficaz e automatizada. Liderando treinamentos de segurança e práticas de desenvolvimento seguro por meio de frameworks como o OWASP ASVS. Assessorando diretamente a alta administração sobre práticas de segurança cibernética, postura e avaliação de riscos. Trabalhando diretamente com equipes multidisciplinares de engenharia e arquitetura para fornecer soluções otimizadas e seguras.

Education

• Ohio University

  Management and leadership

  2019 — 2019

• Language Systems International

  English Language and Literature/Letters

  2017 — 2017

• FIAP

  Post Graduation, Computer and Information Systems Security/Information Assurance

  2014 — 2015

• CNA - Idiomas

  Advanced English Idiom, Líguas

  2011 — 2013

• Universidade Paulista

  Bachelor of Computer Science, Computer and Information Sciences and Support Services

  2009 — 2013

Skills

• Information Security Management
• Cobit
• Firewalls
• Cisco Certified
• Infrastructure
• Risk Management
• Governance
• Vulnerability Management
• Antivirus
• Itil
• Itil Certified
• Management Consulting
• Information Security
• Security
• Tcp/Ip
• Information Technology
• Operating Systems
• Risk Assessment