Loading...

Clarity

Carolina Oliveira

KISSIMMEE

I have 10 years of experience in the Information Security Branch, indicating with the technical and operational part. Currently I have a Global report, with the work proposal in question as Risk Management, responsible for the Brazilian environment, I have the responsibility to maintain the environment with Business Continuity, Maintain the compliance environment in accordance with the Company Security Policy. Focal Point of all internal / external audits (BIGFOUR) with the Business Units, as well as the Market certifications that the company has won for the effectiveness of its business.

Control of Budget of R $ 5MM, with the objective of optimization, automation without losing the efficiency of the processes and keep the technology park always updated and adherent with the security policies in the tools that manage.

I have experience of Local and Global Times, in Brazil I have been the Leadership of 24 people being Third Parties and Officials, Employees in Costa Rica and my Immediate Head Global Leader located in Nottingham (UK).

Metrics are extremely important to align the expectations and strategy of the Area and meet the Expectations of the Business area. All metrics are reported weekly to Local and Global Board. With well-defined metrics like Six Sigma, we can visualize where we can make process improvements and identify process deviations.

Therefore, I believe that I have experience to add to the your strategy.

Att.
Carolina Oliveira

$1.67/min

—
0 Calls

—

0 Reviews

—

Avg. call

Information Technology Information Security Security Information Security Management Security Audits IT Audit Compliance Management

Call me to talk about

IT Security Manager

dentity and Access Management
Responsible for automating the provisioning access process and access certification through the Identity Management tool.
I created identity management with the user cycle for new employees and leavers, with this integration with the base of HR, all accesses are blocked and deleted. The integration of identity management tool integrated with AD (Activity Directory), Cloud Security (Amazon) and RACF (Mainframe).
Established the process Access Review and adaptation of tools, systems and products to the Manager of Information, setting the policy in company with the philosophy "need to know", reducing information leakage and unauthorized access and SoD (Segregation of Duties). Automatic Process by OIM (Access Certification, Profile Violation, Audits).
Vulnerability
Responsible for Vulnerability Management, establishing the process of corrections and identification of vulnerabilities, such as outdated Patchs in the internal and external environments and systems with end of life. I use Quallys for scan all network and identify the vulnerabilities open.
Architecture
Responsible for maintaining the security tools meet the company's security policy, as a responsible of implementation - Centrify, ERPM (Safe passwords), Guardium (Database Monitoring Tool), Varonis (Monitoring Tool Directory and AD), DLP (Data Loss Prevention), PGP (E-mail Encryption), SEP (Endpoint Protection), SEE (Endpoint Encryption) by Symantec, Cloud implementation and Qradar monitoring.
Analyses and Monitoring Social Midia, about the brand I was worked and make reports.

Answers 0
Reviews 0

Answers

Reviews

Member since October 2018