Looking for a job

Paulo Lousada

@paulolousada

Cybersecurity GRC Analyst at Flutter Brazil who developed its security policy framework and automated assessment solution.

Brazil

Message

What I'm looking for

I'm targeting cybersecurity GRC and related roles, including security compliance, assurance, risk, governance, third-party risk, and GRC consulting.

At Flutter Brazil, I developed and implemented the Information Security policy framework, Blue Team playbooks, and runbooks. I also created cybersecurity KPIs and implemented an awareness and training process.

I developed an automated solution for security assessments and due diligence questionnaires, with a Q&A knowledge base and evidence repository integrated with AWS S3. In my current role, I also monitor and validate security rules and alerts using CrowdStrike EDR and Wiz CSPM.

Previously, at Cortex, I reviewed and adapted Information Security policies and processes to ISO 27001 requirements and supported SIEM Wazuh implementation. At Unimed Campinas, I worked on incident response, ISO 27001 activities, and security analysis for projects following Security by Design principles.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Analyst (GRC Analyst)

Current

Flutter Brazil

Jun 2025 - Present (1 year 4 months)

Monitor and validate security rules and alerts using CrowdStrike EDR and Wiz CSPM. Develop and manage the organization's Information Security policy framework, Blue Team playbooks, and security KPIs.

CrowdStrike Falcon EDR Wiz CSPM Information security policy Playbooks Security Metrics Security Assessments Due Diligence Shortcut S3

Cyber Security Analyst

Cortex

Sep 2023 - May 2025 (1 year 8 months)

Managed identity and access management, security incidents, and Google Workspace administration. Reviewed and adapted Information Security policies and processes to ISO 27001 requirements.

IAM Incident Response Google Workspace Crowdstrike AWS ISO 27001 Wazuh Security Policies Security Metrics

Cyber Security Analyst

Unimed Campinas

Jan 2023 - Aug 2023 (7 months)

Managed security incidents and supported ISO 27001 certification activities. Developed security policies, awareness training, and performed access, network, and log monitoring.

CrowdStrike Falcon Cloud Security Guardicore Palo Alto Firewalls Symantec EDR Incident Management ISO 27001 Security Awareness Security By Design Access Management Network Monitoring Log Monitoring

Information Security Intern

Unimed Campinas

Feb 2022 - Dec 2022 (10 months)

Supported security incident management and Information Security Governance activities. Contributed to the ISO 27001 implementation project and the development of the Business Continuity Plan.

Incident Management Information Security Governance ISO 27001 Business Continuity Planning