Open to opportunities

Pedro Borracha

@pedroborracha

Message

I lead AI-driven cybersecurity strategy, risk management, and incident response.

Portugal

Message

What I'm looking for

I’m looking to lead cybersecurity strategy, AI-driven threat intelligence, risk management, and incident response in an organisation that values resilient security, cross-functional collaboration, and continuous improvement.

I’ve led cybersecurity strategy and operations as CISO at TAGD and Devoteam Cyber Trust, using AI and machine learning to strengthen threat detection, risk management, incident response, and regulatory compliance across multi-cloud environments.

Previously, I led information security at Depop, TotallyMoney, and Dnata Travel, where I built security awareness and management programs, implemented security controls and incident processes, and aligned enterprise security with NIST, SANS Critical Controls, and ISO/IEC 27001/27002. At Depop, I delivered an awareness program with an 80% completion rate and implemented a Bug Bounty program.

I also bring hands-on experience in cloud security, DevOps, security engineering, threat intelligence, penetration-testing coordination, and SDLC security. I communicate complex risks clearly to technical and non-technical stakeholders and lead teams through high-pressure security challenges.

Experience

Work history, roles, and key accomplishments

Chief Information Security Officer

Devoteam Cyber Trust

Jan 2026 - Jul 2026 (6 months)

Delivered a diverse portfolio of cybersecurity projects and services to multiple clients across various industry sectors. Conducted comprehensive technical cybersecurity audits, assessments, and vulnerability analyses.

Cybersecurity Assessments Vulnerability Analysis Risk Management Incident Response AWS Azure GCP Security Awareness Training

Chief Information Security Officer

TAGD

Jan 2024 - Jan 2026 (2 years)

Led strategic and operational efforts to safeguard digital assets, leveraging AI and ML to enhance threat detection, risk management, and incident response. Developed AI-powered security frameworks and integrated machine learning models for threat intelligence and risk assessments.

AI ML Threat Detection Risk Management Incident Response Compliance Vendor Risk Management Threat Intelligence Security Awareness

Book Author/Promoter

Self Employed

Jan 2023 - Dec 2023 (11 months)

Authored and published a non-fiction book, executing promotional strategies to increase visibility and sales. Demonstrated project management skills in coordinating production, promotion, and distribution.

Writing Publishing Marketing Social Media Project Management

Freelance Information Security Consultant

World of Books Group

Oct 2022 - Jan 2023 (3 months)

Conducted a comprehensive evaluation of Information Security maturity, assessing cyber security controls to prioritize and manage cyber risk. Coordinated penetration testing initiatives and presented findings to C-level management.

Information Security Management Risk Management Penetration Testing SDLC Threat Intelligence

Information Security Manager

JP Morgan Chase & Co.

May 2022 - Sep 2022 (4 months)

Led cyber risk management for consumer banking products, providing security engineering support and overseeing key technology risks. Managed a team for cyber threat intelligence analysis, leveraging all-source intelligence and dark web monitoring.

Cyber Risk Management Security Engineering Threat Intelligence Dark Web Monitoring Risk Assessment

Principal Consultant

Contino

Sep 2021 - May 2022 (8 months)

Served as Subject Matter Expert in Security, Risk & Controls, specializing in GRC and Cloud Controls Frameworks. Developed InfoSec strategies and roadmaps, and spearheaded a cyber threat intelligence program.

GRC Cloud Security Information Security Strategy Threat Intelligence SecOps

Head of Information Security

Depop

Jul 2020 - Sep 2021 (1 year 2 months)

Guided a high-performing Infosec team, prioritizing tasks and fostering development. Directed implementation of an Infosec Awareness program with 80% completion rate and led design of a Bug Bounty program.

Team Leadership Threat Intelligence Incident Response Vulnerability Management Security Awareness Bug Bounty NIST ISO 27001

Head of Information Security

Totally Money

May 2019 - May 2020 (1 year)

Initiated and managed an Infosec Awareness program and led development of an Information Security Management System. Devised strategic deployment plan for information security, integrating risk assessments.

Information Security Management Risk Assessment Security Awareness ISMS

Head of Information Security

Dnata Travel

Feb 2018 - Apr 2019 (1 year 2 months)

Oversaw implementation and maintenance of IT security systems and corporate information security policy. Pioneered Infosec Awareness program for 2000 users and implemented Information Security Management System.

IT Security Policy Implementation Security Awareness ISMS Incident Management

Cloud Security Lead

CompareTheMarket

Jul 2017 - Feb 2018 (7 months)

Guided and developed a team of Security Analysts, executing a security roadmap aligned with SANS/CIS controls. Held accountability for Cloud Security governance, compliance, and data protection.

Cloud Security Team Leadership SANS CIS Controls Incident Management Data Protection

DevOps Engineer

Sky Broadcast

Jun 2016 - May 2017 (11 months)

Pioneered automation initiatives in MIP, integrating CI, OpenStack, and VMWare. Orchestrated seamless MIP releases through automation and standardized processes.

DevOps Automation CI CD Ansible OpenStack VMWare

Systems Administrator / Senior Consultant

NTT DATA UK

Nov 2015 - Jun 2016 (7 months)

Executed key duties supporting giffgaff, implementing OS hardening and achieving PCI compliance using Ansible. Led reorganization and training of TechOps team, fostering agile methodologies.

Systems Administration RHEL Ansible PCI Compliance Agile Team Leadership

Technical Consultant

Openbet Technologies Ltd.

Mar 2015 - Sep 2015 (6 months)

Initiated and led a Security Tiger Team to address security concerns, establishing Security and Compliance and redesigning Business Continuity Plan. Ensured compliance with betting regulations.

Security Consulting Compliance Business Continuity OWASP Jira

Senior Developer / DevOps

Openbet Technologies Ltd

Jan 2014 - Mar 2015 (1 year 2 months)

Delivered support to team and project management, overseeing VM availability and performance using Zabbix. Championed automation, integration, and configuration management initiatives.

DevOps Automation Zabbix Configuration Management Security

Chief Security Officer

SMYES Consultoria e Auditoria em Segurança Informática

Jan 2012 - Dec 2013 (1 year 11 months)

Installed, configured, and administered Linux and Windows servers in LAN and WAN environments. Spearheaded security strategy, implementing risk mitigation plans and updating risk assessment documentation.

Linux Windows Server Network Administration Risk Assessment Security Strategy

Chief Technology Officer / Senior Information Security Analyst

Norwegian Petroleum Academy

Dec 2005 - Dec 2013 (8 years)

Oversaw project delivery in diverse environments, conducting risk assessments and security testing. Implemented and refined security strategies to safeguard company assets.

Project Management Risk Assessment Security Testing Security Strategy