Open to opportunities

Edson Agostinho

@edsonagostinho

Message

Senior Information Security Manager with 20+ years leading GRC, risk, compliance, and cyber security outcomes.

Australia

Message

What I'm looking for

I’m looking for a senior GRC and cyber security leadership role where I can run audit and assurance, drive enterprise security risk management, and improve vulnerability, incident response, and compliance outcomes with strong stakeholder collaboration.

I’m a senior cyber security, risk and compliance professional with 20+ years of experience across Australian State and Federal Government, consulting, telecommunications, financial services, and education. I’m known for strong GRC leadership—leading audit and assurance activities, running enterprise security and risk assessments, and driving compliance and regulatory initiatives that strengthen organisational resilience.

In my current role at Fujitsu, I lead cyber security deliverables for large public-sector and financial customers, including audit coordination, security incident leadership, security risk management, vulnerability management, and IRAP remediation. I also spearhead end-to-end vulnerability and penetration testing programs, coordinate security control assessments, align cyber governance forums with customer leadership, and partner with third parties to patch, assess risk, and resolve incidents—delivering measurable improvements in security posture.

Experience

Work history, roles, and key accomplishments

Current

Senior Information Security Manager

Current

Fujitsu

May 2023 - Present (3 years 1 month)

Led cyber security deliverables and governance across multiple Australian government and financial services customers. Drove end-to-end IRAP remediation for AFSA and led critical vulnerability remediation efforts, including designing a new vulnerability management process for the City of Gold Coast Council.

IRAP Remediation Australian Cyber Security Centre (ACSC) Alignment Security Risk Management Vulnerability Management Security Governance Compliance Management Rapid7 Reporting

Information Security Advisor/Manager

Singtel Optus

Apr 2022 - Apr 2023 (1 year)

Provided end-to-end leadership for security incident, risk, vulnerability, penetration testing, audit, and compliance management for Westpac Banking Corporation. Upgraded Splunk from v6.1 to v9.0 and led remediation of over 1,000 vulnerabilities to reduce cyber risk exposure.

Splunk (SIEM) Upgrade Vulnerability Management Penetration Testing Security Incident Management Risk Management Audit and Compliance Stakeholder Management

Information Security Advisor/Manager

Trustwave

May 2021 - Apr 2022 (11 months)

Oversaw incident response, risk management, vulnerability management, penetration-testing governance, audit coordination, and compliance activities for Westpac and the Commonwealth Bank of Australia. Led the transition from Rapid7 to Tenable and helped remediate more than 1,000 vulnerabilities to support security and reputation protection.

Incident Response Vulnerability Management Tenable Rapid7 Audit Coordination Risk Management

Account Security Officer/Manager

DXC Technology

Oct 2016 - Apr 2021 (4 years 6 months)

Developed security governance frameworks, performed security risk assessments, and managed vulnerability and penetration testing across multiple customer accounts including the Australian Taxation Office and Westpac. Led more than 20 internal and external audits (SOC 2, ISO 27001) and supported regulatory compliance outcomes including APRA CPS 234 and GDPR.

IRAP Assessment Support Security Governance Penetration Testing Vulnerability Management Audit Coordination SOC ISO 27001 CPS 234 GDPR

Senior Cyber Security Consultant

Ernst & Young

Jan 2014 - Oct 2016 (2 years 9 months)

Managed large-scale penetration testing engagements and delivered third-party security risk assessments and ITGC audit activities for major Australian clients. Led penetration testing across nearly 200 applications and performed more than 10 ITGC audit activities to identify major control gaps and drive remediation.

Penetration Testing Security Assessments ITGC PCI DSS Assessment Root Cause Analysis