Open to opportunities

João Victor

@jvictor

I am passionate for anything related to cyber security. I'm a GIAC Certified Incident Handler (GCIH)

I have a BSc in computer engineering and an MSC in Cyber Security and Digital Forensics. I have also co-authored a paper in digital forensics that was published in the journal Digital Investigation.
My first job was as a Data Analyst at EY, which gave me a data-drive mentality.
Afterwards I worked for 2 years as a Cybersecurity consultant, during the first year I focused mostly in GRC related projects, in the second year I started assisting mostly IR and Pentesting projects. Due to this, I decided to study and get the GCIH certification.
I then moved jobs and worked as a Cyber security analyst at UserGems, which is an american startup company. Due to my good work and independent attitude I was promoted to Cyber Security Manager after a year, making me responsible for all aspects of cyber security in UserGems.

Experience

Current

Cyber Security Manager

Current

UserGems

Mar 2023 - Present (1 year 4 months)

Responsible for monitoring all operations and infrastructure to ensure the organization's digital footprint is secure.
- Maintain all security tools and technology and be the first point of contact within client calls/meetings.
- Maintain policies and monitor internal and external compliance, and work with different departments to reduce risk.
- Implement new technology, audit policies and control

IT Risk Management Cyber Risk Management DevSecOps Incident Response

Cyber Security Analyst & Risk Consultant

dig8ital GmbH

Mar 2020 - Mar 2022 (1 year 11 months)

Main tasks are focused on the development and implementation of cyber security risk, compliance and governance frameworks such as:
- Conducting Cyber Risk Assessments based on ISO 27001 and ISO 31000 and ISF.
- Coordinating and managing audit and compliance activities including working with risk owners to determine treatment plans.
- Assisting on the creation and management of compliance managemen

Incident Response Penetration Testing Risk And Compliance

Cyber Security Analyst

UserGems

May 2022 - Mar 2023 (10 months)

Monitor the organization’s computer networks and systems to identify any violations and security breaches that need to be resolved.
-Develop and manage policies, processes, and procedures to ensure the company’s systems stay as safe and compliant to all applicable regulations and standards
-Keep up to date with the latest security and technology developments.
-Test and evaluate security products.

Cyber Risk Management Cyber Security Incident Response DevSecOps