Experienced professional with more than ** years of proven success on:
information security, computer and network security, leading team, project
management, product development, software development, software quality
assurance (SQA), and organizational startup. A strong leader with a passion
for strategic planning, process management, and driving results.
Responsible for implementing the Brazilian Navy's InfoSEC department, being
its CISO (Chief Information Security Officer) for more than 6 years, and
military extensive experience as Navy's Commander rank (O-5). As Product
Manager, collaborate to transform "Modulo Risk ManagerTM " into the global
leader GRC (Governance, Risk & Compliance) system. Organized the SQA area
at TQTVD, improving the test automation and software quality to be embedded
in TV sets and set-top-boxes, resulting the best middleware developed for
the ISDB-Tb standard (digital TV).
PROFESSIONAL SKILLS & CERTIFICATIONS
Strategic Vision Startup Product & Technology
Implementation - R & D
Risk Management & Corporate Culture Change Quality Assurance
Compliance
Business Continuity P & L Responsibility Information security
Plan
Project Management Information Security Planning and
Implementation
Security Officer Leadership Engineering
SIGNIFICANT ACHIEVEMENTS
. Leadership: extensive experience as: Navy Officer (O-5 rank), Project
Manager, Product Manager, and QA Manager. Group management for teams over
15 engineers, and over 70 enlisted military. History of on time and under
budget delivery. Responsible for 3 major restructuring and consolidation
efforts. Effective change agent in troubled sub-performance
organizations.
. Information Security: Implementing the InfoSEC process and respective
organizational structure for the Brazilian Navy. Extensive experience in
security tools and cyber warfare.
. Innovator: military antenna development, and also new process development
for information security audits, and product management
. Strategic Planning and Technical Marketing: Developed 4 year product road
maps and competitive strategies for Modulo Security, and TQTVD Software.
. Dealing with Business Units and Promoting IT with the Business: extensive
experience as Product Manager at Modulo Security (interacting with
business units for pre and post sales), and the Digital TV area,
supporting the business units related to middleware sales.
. Application Architecture, Development, and Quality Assurance:
implementing the Control Systems (Nuclear power plant and Guidance
System) development for the Brazilian Nuclear Submarine (Project
Manager), the "Modulo Risk ManagerTM" product development, and the
Digital TV middleware development including its testing environment and
software quality assurance.
. Academics: Electrical Engineer's Degree, and two Master's Degree
(Electrical Engineering). Experienced Graduate professor (10 years),
providing both technical and managerial disciplines.
CAREER HISTORY
cablevision, Woodbury NY - mar/2011 to dec/2012
Senior Consultant - Project Manager at Cablevision's Advanced
Engineering Systems dept.
> Provided project management and technical solutions for
Cablevision (Cable TV and Communications company) in specific
projects related to Software Quality Assurance, Process
Organization, QA Lab Normalization, use and test case writings,
test scripts development, test plans, quality reports, System
Security, Systems Integration, and Systems Engineering.
> Experienced: MS-Project, JIRA, HP-Quality Center, MS-Office,
Stormtest, VOD, Tibco, Seachange.
tqtvd Software (www.tqtvd.com), Rio de Janeiro, Brazil, apr/2009 to
feb/2011
QA Senior Manager
> Implemented, and managed the Software Assurance area regarding the
development of AstroTV (middleware to be embedded in TV sets and
Set-top-boxes). AstroTV middleware is responsible for TV
interactivity. It is the best solution for ISDB-Tb Digital TV
Standard, being adopted by the greatest TV manufacturers (SONY,
Panasonic, Philips, LG, Toshiba).
> Managed the development and implementation of the AstroATE, which
is the automated testing environment for ISDB-Tb Digital TV
Standard. This system automated more than 10,000 test cases.
AstroATE is also adopted by the greatest TV manufacturers (SONY,
Panasonic, Philips, LG, Toshiba), in order to obtain ISDB-Tb
standard compliance certification, performance and quality
improvements.
> Managed a team of 20 professionals in charge of software testing,
use and test case writings, test scripts development, test plans,
quality reports, and software quality assurance activities.
> Also as part of the achievements were to integrate software
development and testing activities, to support actions related to
commercial TQTVD products/vendors, project management (including
development and budget control), presentations to customers,
board, and international conferences.
> Experienced: MS-Project, MS-Office, JIRA, IBM-Rational, Java, JDE,
Java-TDK, NCL-Lua, AstroTV, AstroATE, Agile and Waterfall
Methodolgies.
MODULO SECURITY SOLUTIONS (www.modulo.com), New York-NY & Rio de Janeiro-
Brazil, mar/2007 to apr/2009
Product Manager
> Developed, implemented, and managed the Product Management area
for the "M dulo Risk Manager" suite. This suite is the global
leader GRC (Governance, Risk, and compliance) system as defined by
Gartner Institute. "M dulo Risk Manager" suite evolves assets
inventory, analysis (by 4,000 automated collectors, and 19,000
controls), evaluation (by knowledge bases applied to: information
security, IT security, privacy, financial regulations, bank
industry regulations, international regulations, etc), and
workflow management for risk treatment.
> Integrated the "M dulo Risk Manager" development, support and
maintenance, as well as, providing technical and managerial
guidance.
> Also as part of the achievements were coordinating a team of 12
professionals, software architecture definitions, SaaS infra-
structure planning, Citrix virtualization, budget planning, P&L,
project management, product marketing, internal interfaces,
product training, pre-sales & post-sales support, poof-of-
concepts, customer support, helpdesk, operational procedures,
presentations to customers, board, and international conferences.
> Experienced: MS-Project, MS-Office, Modulo Risk Manager, Citrix,
Kayako, .NET framework, Agile Methodology.
brazilian navy, Rio de Janeiro, Brazil, oct/2000 to feb/2007
CISO - Chief Information Security Officer
> Developed, implemented, and managed the InfoSEC Department for the
global Brazilian Navy Communication Network, as well as, providing
technical and managerial guidance. The Brazilian Navy
Communication Network includes more than 80,000 devices
(computers, servers, radio links, routers, satellite links)
installed on ships, bases, embassies, and marines vehicles.
> Also as part of the achievements were budget planning/control,
project management, security team leading, implementing
information security proceedings, security architecture, technical
network security projects, IP networking, security auditing, data
warehouse security auditing, wireless security, computer
forensics, policies (including Security Policy for Minister of
Defense Command and Control Military System), standards
compliance, security specialized consultant, cryptology resources
management, incident response team coordination, anti-virus
management, continuity plan, and risk analysis.
> Received SECMASTER-2003 Award from ISSA (Information Systems
Security Association) for the best Government Project in the
Information Security area, consisting of "Implementation of
Brazilian Navy Information Security Auditing Proceedings and
Standards". Other Brazilian Government departments also adopted
the standards.
> Performed more than 30 computer forensics successful studies.
> Performed more than 40 information security audits in the
Brazilian Navy and Brazilian Government departments.
> Cyber warfare specialization, developing the first proposal and
plan for implementing the Cyberwar Center at the Brazilian
Minister of Defense.
> Implemented the Cyber Intelligence Center at the Brazilian Navy.
> Experienced graduate professor in the following InfoSEC
disciplines: Information Security Auditing, Wireless Network
Security, Internet Security, and Firewall Systems
> Experienced: MS-Project, MS-Office, Envision, IPS, Nessus, Encase
Forensics, Kismet, Snort, Talisker Radar, McAfee solutions, SANS
Auditor, Linux, Cisco Routers, VoIP, Military Systems.
brazilian navy, S o Paulo, Brazil, feb/1992 to feb/1998
Project Manager - Telecommunication Board and Technological Center
> Responsible for Brazilian Navy radiofrequency management, as well
as all regulations and government interfaces concerning this
technical regulatory area.
> Coordinated engineering projects regarding control systems
(hardware and software) for the nuclear submarine projects. The
projects had a budget of U$15M referring to developments for
nuclear plant control and instrumentation systems, submarine
guidance systems, and respective simulation systems.
> Experienced: MS-Project, HPM, MS-Office, C, C++, ADA,
Microprocessors, Military Systems, Ruggedized Systems, Nuclear
Systems, Nuclear Standards and Safety.
brazilian navy, Rio de Janeiro, Brazil, dec/1986 to mar/1988
Electricity & Telephony Dept. Associate - Aircraft Carrier
Coordinated operational and maintenance team, leading a group of 72
militaries inside the Aircraft Carrier.
> Experienced: On board electrical military equipments, and
telephony networks.
EDUCATION BACKGROUND & CERTIFICATIONS
> MSEE (telecom), Naval Postgraduate School, Monterey, CA, USA - With
Distinction & Honors - oct/2000
> MSEE (computer) University of Sao Paulo, Sao Paulo, Brazil -
mar/1996
> BSEE (computer) University of Sao Paulo, Sao Paulo, Brazil -
dec/1991
> BS Naval Academy, Rio de Janeiro, Brazil - dec/1985
> CERTIFICATIONS:
- Wireless security specialization with GIAC certification (by
SANS Institute).
- BS-7799 Auditor Leader certification (by DNV Veritas)
- Security Officer certification (by Modulo Education Center)
- Business Continuity Plan certification (by Modulo Education
Center)
- Risk Management and Compliance (by Modulo Education Center)
LANGUAGES PROFICIENCY
> Portuguese (fluent - native language)
> English (fluent)
> Spanish (reading and speaking)