Danner Azevedo Benevides

As Information Security Coordinator, I led a team of 6 employees and 8 third parties, focusing on identity and access projects in areas. My initiatives were essential to improving asset protection and the employee experience, as well as strengthening compliance and operational efficiency. Responsibilities: • Led the IAM front in the Cloud GCP environment, collaborating with technology teams to implement processes in line with security best practices. • Led the evolution of controls, resulting in the reduction of nonconformities during audits and mitigating technological risks. • Managed the migration and implementation of Identity and Access Management solutions, including the SailPoint implementation and the migration of the PAM solution to CyberArk. • Developed and implemented analytics processes to identify nonconformities and generate strategic insights. • Implemented an RBAC project, facilitating agile and accurate access concessions, and established a robust management system for third parties. • Introduced agile methodologies in identity and access management, increasing the efficiency and effectiveness of deliveries, and participated in the implementation of passwordless solutions in collaboration with the security architecture team. Achievements: • Migration from Microfocus to SailPoint in less than 5 months, without any complications, establishing a successful case. • Successful implementation of CyberArk as a PAM solution, aligned with existing processes and ensuring flawless delivery. • Improved employee perception in internal satisfaction surveys, promoting a more collaborative and efficient working environment. • Analytics processes that identified nonconformities and generated valuable insights, supporting the business lines in risk mitigation. • Application of agile methodologies that improved efficiency and effectiveness in identity and access management deliveries.

I worked as an Information Security Specialist, focused on Identity and Access Management (IAM), for a large company. My role involved leading critical projects in line with security best practices, global frameworks such as NIST, ISO/IEC 27001 and COBIT, and regulatory compliance. I worked closely with cross-functional teams to ensure that all IAM processes were compliant with security regulations, policies and standards. Responsibilities: • Leadership in implementing and driving requirements for all Access Management projects, ensuring alignment with security regulations and best practices. • Development and execution of a privileged account inventory project, facing significant challenges due to the integration of legacy systems and lack of previous controls. • Establishing detailed and mapped processes for managing privileged accounts, using BI and Analytics to support decisionmaking. • Implementation of audit controls to connect existing processes and identify control gaps, making it easier to target risk and quickly resolve problems related to identity and access management. Achievements: • Achieved complete visibility over privileged accounts, enabling strategic alignment with senior management and mitigation of risks associated with the absence of previous controls. • Significant improvement in regulatory compliance, resulting in more efficient auditing processes and a reduction in identified risks. • Successful implementation of IAM processes that ensured continuous compliance with security regulations, reducing lead time and increasing operational efficiency.

I led the modernization of identity and access management processes at Latin America's largest bank, including the implementation of SailPoint and CyberArk for privileged access management. We faced challenges with obsolete systems and non-compliance and, together with the team, ensured compliance with regulations such as SOX, PCI, Ambima and BSM, as well as improving operational efficiency. Responsibilities: • Together with my team, I developed and implemented the RBAC Matrix and Segregation of Duties (SOD) controls. • I managed internal and external audits, including SOX, PCI, Ambima and BSM, leading walk-throughs and ensuring compliance with regulatory standards. • I collaborated in the creation and implementation of the structuring information security program, focused on identity and access, aligning the scope with frameworks such as NIST, ISO/IEC 27001 and COBIT. • I supported the cloud migration strategy, participating in committees and working with the team to define best practices for identity and access management. • In partnership with the team, I led the automation of identity and access management processes, significantly reducing operating costs and lead times for more than 100,000 employees, increasing operational efficiency and agility. • I maintained and improved identity and access controls with my team, achieving an effectiveness rate of over 90% in internal and external audits. Achievements: • Reduced operating costs by updating and eliminating obsolete processes, optimizing resources and improving efficiency. • Process automation reduced the lead time for 100,000 employees, promoting a more agile and efficient operation. • I mitigated critical risks in the brokerage area, positively impacting the perception of risk in the market and helping to retain and attract clients. Risk reduction strengthened the bank's reputation and prevented the loss of contracts and clients.

Technical leadership in the implementation of information security solutions, with emphasis on the migration and management of tools such as AntiSpam, Antivirus, Proxy, and FireEye. I led the implementation of SIEM (Arcsight), NAC, IPS, DLP, and the analysis of vulnerabilities in web and operational systems. Responsible for restructuring Active Directory, including login scripts and GPOs, and automating access control processes. I also acted as a member of the Security Committee, assisting the CSO in creating and reviewing corporate information security policies. Main achievements: • Implementation and migration of security tools (Arcsight, FireEye, IPS, Proxy, DLP) which resulted in a more robust security posture. • Restructuring Active Directory and automating processes, increasing access management efficiency by 30%. • Participation in drafting policies that ensured greater regulatory compliance and risk mitigation.

I managed a team of 5 analysts, leading Data Center restructuring projects at DASA Group units in São Paulo, ensuring high availability and resilience of technological services. I developed and implemented an EDM (Electronic Document Management) solution that optimized patient care, reducing operating costs and speeding up processes. Main Achievements: • Successful restructuring of Data Centers, ensuring greater security and continuity of services. • Implementation of an EDM solution, resulting in significant cost savings and increased operational efficiency.

I provided end-to-end technical support in an organization with more than 20,000 employees, including hardware and software troubleshooting, operating system support and user account and access management. I maintained the network infrastructure and was recognized for providing fast and effective solutions, improving employee satisfaction and minimizing the impact of technological failures. Main Achievements: • Optimization of technical support response times, increasing user satisfaction. • Efficient maintenance of the network infrastructure, ensuring business continuity.