Clayton Soares

• Structuring and leadership of the Information Technology area, focusing on digital transformation, innovation, infrastructure modernization and increased operational efficiency, in addition to the preparation and execution of the IT and information security master plan, aligning technology with the company's growth and competitiveness objectives; • Modernization of IT infrastructure and networks, with the implementation of new technologies and restructuring of on premise and cloud environments, ensuring greater availability, security and performance; • Implementation of IT governance, regulations and internal controls with a focus on ITSM, contract and supplier management, budget control, agile project management, compliance and mitigation of operational and cyber risks as well as the transformation of the company's digital channels and the digitalization of points of sales; • Implementation of information security, privacy and data protection, defining the strategy, policies, standards and procedures, as well as adoption of EDR solutions, enterprise firewall, cloud backup, disaster recovery; • Promotion of a culture of innovation and training of the technical team, raising the level of digital maturity of the organization and positioning IT as a strategic area for the business; • Modernization of the SAP ERP architecture, replacement of the POS system and update of WMS, BI and E-Commerce.

• Strategic leadership of the Privacy and Data Protection agenda, with the structuring of the Privacy Office and the creation of the Corporate LGPD Compliance Program. Acting as DPO (Data Officer), reporting directly to the IT Vice Presidency and participating in the Information Security Executive Committee; • Implementation of IT Governance with a focus on control, efficiency and compliance, including budget management processes, contracts, suppliers, performance indicators (KPIs), cloud financial governance (FinOps AWS) and corporate regulatory policy; • Transformation of the IT Service Desk into a SSC (Shared Services Center) based on ITSM practices, ensuring standardization, traceability and increased IT operational maturity; • Governance of SAP ERP, with a focus on compliance and performance, including review of accesses and profiles, license management, structuring of governance of business demands and implementation of a formal change management process; • Creation and structuring of the Information Security area, leading technical teams (Blue, Red and White Teams), defining and executing the cybersecurity strategy and conducting critical projects such as Firewall, XDR, NAC, DLP, IAM, SIEM, SOC, vulnerability management, threat intelligence and user awareness.

• Development of the Information Technology Master Plan (PDTI) and Information Security Master Plan (PDSI), with a long-term strategic focus, integration between business areas and support for the company's digital transformation; • Structuring of the IT Governance and Information Security area from scratch, reporting to the IT Board and aligning with international partners (Vale, Dongkuk and Posco), integrating compliance, risk management and audit practices in a mission-critical and highly complex environment; • Implementation of the IT governance structure, focusing on efficiency, compliance and traceability, including processes for managing contracts, suppliers, budget, SLAs and KPIs; Definition and implementation of IT policies, regulations and internal audits; Standardization of demand management and change control processes; • Creation of the Information Security area, with construction and execution of the cybersecurity strategy, definition of policies, processes and tools based on ISO27001, NIST framework and international best practices. Implementation of security tools and solutions such as SIEM, DLP, corporate antivirus, next-generation firewall, and network controls; • Implementation, maintenance and evolution of SAP ERP for the entire company, in addition to managing user demands.

• Creation and leadership of the IT Audit area, subordinated to the Internal Audit Board, with a focus on internal controls and information security in a dynamic and high-growth corporate environment; • Implementation of the IT Risk Matrix, performing operational and compliance audits, ensuring compliance of IT processes with the best governance practices and current regulations; • Responsible for audits of general and specific controls, focusing on Oracle EBS ERP and other critical corporate systems, using the IDEA tool for data analysis and extraction of sensitive information; • Consulting in IT governance and information security, supporting IT and business areas in the adoption of best practices and ensuring the integration of security controls to IT processes and operational areas; • Coordination of continuity and disaster recovery tests, including auditing of backups and contingency plans, ensuring IT operational resilience; • Training and awareness of teams on IT governance and information security practices, with the development of materials and internal training on IT security, risks and governance.

Especialização em Redes de Computadores