# Oldair Barbosa

Oldair Barbosa is a remote worker on Himalayas, Technical Information Security Officer at Deutsche Bank AG, based in Germany.

Source: https://himalayas.app/@oldairbarbosa

```text
Information security leader at Deutsche Bank translating Investment Banking technology risks into executive reporting and remediation.
```

| Detail | Value |
| --- | --- |
| Availability | Open to opportunities |
| Location | Germany |
| Authorized to work in | Germany |
| Salary expectations | 80k+ EUR |
| Job categories | Information Security Director |
| Skills | Information Security Strategy, Technology Risk Management, Security Governance, Cloud Security, Regulatory Compliance, DORA, BaFin, ECB, ISO 27001, NIST CSF, CIS, Operational Resilience, Vulnerability Management, Remediation Management, Audit Management |
| LinkedIn | https://linkedin.com/in/oldairjb |

## What I'm looking for

```text
Security Manager, CISO
```

## About

```text
At Deutsche Bank, I lead technology risk governance and control design for Investment Banking systems and infrastructure. I work across Google Cloud and enterprise environments, guiding risks from identification through remediation and translating them into KPI/KRI reporting for senior leadership.

At Solaris SE, I owned and matured the information security and compliance framework for a regulated digital banking platform. I redesigned risk assessment and tracking, supported BaFin, DORA, and ISO 27001 compliance, and presented executive security risk dashboards.

At Delivery Hero SE, I designed security risk management programs across a decentralized organization. I developed a centralized audit-finding framework and third-party security risk assessment procedures.

Earlier, I held information security leadership, architecture, consulting, and technology leadership roles at Netshoes, Gerdau S.A., Cipher, and HP Enterprise Services. My work has focused on turning complex security requirements into practical frameworks, clearer accountability, and business-focused decisions.
```

## Experience

### Technical Information Security Officer (current)

[Deutsche Bank AG](https://himalayas.app/companies/deutsche-bank). Oct 2024 - Present

```text
Lead technology risk governance and control design for Investment Banking systems and infrastructure, ensuring alignment with regulatory expectations and enterprise standards. Direct risk identification, assessment, and remediation across Google Cloud and enterprise environments.
```

Skills: Technology-Risk, Security-Governance, Google-Cloud-Platform, KRI-KPI-MIS-Reporting, Audit-Management, Regulatory-Compliance, DORA, BaFin, ECB, Risk-Management

### Head of Information Security

[Solaris SE](https://himalayas.app/companies/solarisgroup). Oct 2023 - Sep 2024

```text
Owned and matured the end-to-end Information Security and compliance framework for a regulated digital banking platform. Led regulatory response and compliance activities aligned with BaFin, DORA, and ISO 27001 expectations.
```

Skills: Infosec, Compliance, BaFin, DORA, ISO-27001, Risk-Assessment, Control-Testing, Executive-Reporting, Audit-Management, Team-Leadership

### Manager, Security Assurance & Compliance

[Delivery Hero SE](https://himalayas.app/companies/delivery-hero). Jan 2022 - Oct 2023

```text
Designed and executed security risk management programs across a highly decentralized international organization spanning Europe, APAC, and LATAM. Developed third-party security risk assessment procedures and delivered clear, visual security risk reporting to global leadership.
```

Skills: Security-Assurance, Compliance, Risk-Management, Third-Party-Risk, Security-Governance, Reporting, International-Operations

### Tech Leader

[HP Enterprise Services](https://himalayas.app/companies/hewlett-packard-enterprise)

```text
Led technology initiatives at HP Enterprise Services, focusing on security architecture and delivery of large-scale security programs.
```

### Head of Information Security

Netshoes

```text
Led information security initiatives at Netshoes, focusing on security architecture and control implementation.
```

### Information Security Architect

Gerdau S.A.

```text
Served as Information Security Architect at Gerdau S.A., focusing on security architecture and control implementation.
```

### Senior Security Consultant

Cipher

```text
Provided senior security consulting services, focusing on security architecture and control implementation.
```

## Education

### Faculdade Anglo Latino

BBA, Systems Analysis

```text
BBA in Systems Analysis from Faculdade Anglo Latino.
```

### FGV, Fundação Getúlio Vargas

MBA, Information Technology Management

```text
MBA in Information Technology Management from Fundação Getúlio Vargas.
```

## Tech stack

- Kubernetes
- Python
- Docker

To contact Oldair, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Sudhanshu Bisht](https://himalayas.app/@sudhanshubisht): Information Security Consultant, de dsb GmbH
- [New Message](https://himalayas.app/@newmessage): Cybersecurity Consultant, CyberProAI
- [Rakshata P](https://himalayas.app/@rakshatap): Machine Learning Intern, Larsen & Toubro
- [Nikita Kandekar](https://himalayas.app/@nikitakandekar): Assistant Manager, ISMS, Vodafone India Service Pvt. Ltd.
- [Jineesh Vavukkal](https://himalayas.app/@jineeshvavukkal): Chief Information Security Officer, Rabbit and Tortoise Technology Solutions
- [Enrique Gallardo](https://himalayas.app/@enriquegallardo): Security Architect, Capgemini
- [Maryam X](https://himalayas.app/@maryamx): Information Security & Compliance Lead, Fehthealth Telemedicine Platform
- [Edwin Antonio Martinez](https://himalayas.app/@edwinantoniomartinez): Virtual Chief Information Security Officer, OculusIT
- [Sulaiman Baruwa](https://himalayas.app/@sulaimanbaruwa): Specialist II, Governance, Risk and Compliance, Concentrix
- [enrique vazquez](https://himalayas.app/@enriquevazquez): Security Architect, Capgemini