Looking for a job

Kevin Nunes

@kevinnunes

Message

Information Security Analyst | GRC · SOC 2 · ISO 27001 · Third-Party Risk | Security+ · ITIL 4

Brazil

Message

What I'm looking for

I'm looking to strengthen information security governance, cyber risk, audit, and resilience programs while driving practical control automation, cross-functional remediation, and alignment with security frameworks.

I work where information security governance, cyber resilience, and automation meet.

My career started in IT support and software development, which gave me a practical understanding of users, applications, databases, infrastructure, and the operational consequences of security decisions. Today, I apply that background across GRC and hands-on security operations.

My experience includes security policies and processes, cyber and third-party risk, SOC 2/SOC 3 and internal audits, framework assessments (ISO/IEC 27001, CIS Controls, AICPA Trust Services Criteria), vulnerability management, security awareness, incident response, access governance, SIEM, DLP, endpoint security, and Microsoft 365 security.

I am especially motivated by turning complex or manual activities into clear, measurable, and sustainable processes. This approach has contributed to:

- Reducing vulnerabilities by at least 45%

- Shortening the access review cycle from one month to one week

- Increasing Microsoft Secure Score by 14% in the first month

- Improving phishing reporting by 60%

I have led two security teams simultaneously, translating regulatory and technical requirements into action plans and communicating with executives, auditors, business areas, suppliers, and international customers.

Experience

Work history, roles, and key accomplishments

Current

Information Security Analyst

Current

CSD BR

Aug 2025 - Present (1 year 2 months)

Provides functional leadership across governance and security resilience, coordinating priorities and technical guidance. Develops policies, leads audits, and automates controls, reducing vulnerabilities by at least 45% and shortening access review cycles.

GRC Cyber Risk Management Third Party Risk Management AICPA Trust Services Criteria IAM SOD Vulnerability Management Security Awareness Python PowerShell VBA Microsoft Purview Microsoft Intune Microsoft 365 Security Acronis Active Directory

Current

Mid-level Cybersecurity Governance Analyst

Current

CSD BR

Aug 2025 - Present (1 year 2 months)

Led two security teams simultaneously (Security & Cyber Resilience, 3 people; Information Security Governance, 2 people); currently leads Information Security Governance through prioritization, delivery tracking, technical guidance, and performance input.

• Governance, Risk & Compliance: policies, processes, Incident Response Plan, cyber and third-party risk, BIA, regulatory compliance (Central B

Cybersecurity Governance Analyst Junior

CSD BR

May 2024 - Jul 2025 (1 year 2 months)

• Worked across Information Security Governance, cyber risk, vulnerability management, security awareness, audits, and customer security assessments.
• Developed automations to improve the efficiency, consistency, and traceability of security and governance processes.
• Expanded beyond the original governance scope by supporting security operations and complex technical issues.
• Assumed functiona

Junior Information Security Analyst

CSD BR

May 2024 - Jul 2025 (1 year 2 months)

Supported security governance and compliance activities, including audits, policy development, and vulnerability management. Contributed to SOC 3 reporting and automated access reviews.

GRC Cyber Risk Management SOC AICPA Trust Services Criteria IAM SOD Vulnerability Management Security Awareness Python PowerShell VBA Microsoft Purview Microsoft Intune Microsoft 365 Security Acronis Active Directory

Junior SOC Analyst

NTT Data

Oct 2023 - Nov 2023 (1 month)

Monitored and triaged security alerts, analyzed logs, documented findings, and escalated incidents using IBM QRadar and Splunk.

Security Operations Incident Response QRadar Splunk Log Analysis

Security Operations Center Analyst Junior

NTT

Oct 2023 - Nov 2023 (1 month)

• Monitored and triaged security events using SIEM platforms, including IBM QRadar, Splunk, and CTD.

• Performed log analysis, incident classification, documentation, escalation, and initial incident response activities.

• Worked within established Security Operations Center and ITSM processes.

Junior Software Analyst

Kiman Solutions

Aug 2022 - Sep 2023 (1 year 1 month)

• Developed and maintained business applications using Java EE, PL/SQL, and React.js.

• Mapped business processes and translated customer requirements into technical improvements and software features.

• Investigated application issues and collaborated with technical and business stakeholders throughout the development lifecycle.

Junior Systems Analyst

Kiman Solutions

Aug 2022 - Sep 2023 (1 year 1 month)

Developed and maintained applications using Java, PL/SQL, JavaScript, and React.js, including requirements gathering and process mapping.

Java Pl SQL JavaScript React Requirements Gathering Process Mapping Troubleshooting

Software Developer Intern

Kiman Solutions

Aug 2021 - Aug 2022 (1 year)

• Supported Full Stack application development using Java EE, PL/SQL, JavaScript, and React.js.

• Assisted with system maintenance, database routines, troubleshooting, and implementation of new features.

• Developed the programming and systems foundation later applied to security and process automation.