Security Manager, CISO
Open to opportunities
Oldair Barbosa
@oldairbarbosa
Information security leader at Deutsche Bank translating Investment Banking technology risks into executive reporting and remediation.
GermanyWhat I'm looking for
At Deutsche Bank, I lead technology risk governance and control design for Investment Banking systems and infrastructure. I work across Google Cloud and enterprise environments, guiding risks from identification through remediation and translating them into KPI/KRI reporting for senior leadership.
At Solaris SE, I owned and matured the information security and compliance framework for a regulated digital banking platform. I redesigned risk assessment and tracking, supported BaFin, DORA, and ISO 27001 compliance, and presented executive security risk dashboards.
At Delivery Hero SE, I designed security risk management programs across a decentralized organization. I developed a centralized audit-finding framework and third-party security risk assessment procedures.
Earlier, I held information security leadership, architecture, consulting, and technology leadership roles at Netshoes, Gerdau S.A., Cipher, and HP Enterprise Services. My work has focused on turning complex security requirements into practical frameworks, clearer accountability, and business-focused decisions.
Experience
Work history, roles, and key accomplishments
Current
Lead technology risk governance and control design for Investment Banking systems and infrastructure, ensuring alignment with regulatory expectations and enterprise standards. Direct risk identification, assessment, and remediation across Google Cloud and enterprise environments.
Technology RiskSecurity GovernanceGoogle Cloud Platform
KRI KPI MIS Reporting
Audit ManagementRegulatory ComplianceDORABaFin
ECB
Risk ManagementOwned and matured the end-to-end Information Security and compliance framework for a regulated digital banking platform. Led regulatory response and compliance activities aligned with BaFin, DORA, and ISO 27001 expectations.
Designed and executed security risk management programs across a highly decentralized international organization spanning Europe, APAC, and LATAM. Developed third-party security risk assessment procedures and delivered clear, visual security risk reporting to global leadership.
Security Assurance
Compliance
Risk ManagementThird Party Risk
Security GovernanceReporting
International OperationsTech Leader
Led technology initiatives at HP Enterprise Services, focusing on security architecture and delivery of large-scale security programs.
NE
Head of Information Security
Netshoes
Led information security initiatives at Netshoes, focusing on security architecture and control implementation.
Information Security Architect
Gerdau S.A.
Served as Information Security Architect at Gerdau S.A., focusing on security architecture and control implementation.
CI
Senior Security Consultant
Cipher
Provided senior security consulting services, focusing on security architecture and control implementation.
Education
Degrees, certifications, and relevant coursework
FL
Faculdade Anglo Latino
BBA, Systems Analysis
BBA in Systems Analysis from Faculdade Anglo Latino.
FGV — Fundação Getúlio Vargas
MBA, Information Technology Management
MBA in Information Technology Management from Fundação Getúlio Vargas.
Tech stack
Software and tools used professionally
Availability
Open to opportunities
Location
GermanyAuthorized to work in
Salary expectations
80k+ EUR
Social media
Job categories
Skills
Information Security Strategy
Technology Risk ManagementSecurity GovernanceCloud SecurityRegulatory ComplianceDORABaFin
ECB
ISO 27001NIST CSFCISOperational ResilienceVulnerability ManagementRemediation Management
Audit ManagementInterested in hiring Oldair?
You can contact Oldair and 600K+ other talented remote workers on Himalayas.
Message OldairGet matched with your dream remote job
Sign up now and join over 1,000,000+ remote workers who receive personalized job alerts, curated job matches, and more for free!
