Marcos Ortolani

Responsible for the cybersecurity strategy and management of the group's companies, such as Ipiranga, Ultragaz, Ultracargo, etc.; from strategic planning, P&L management and the customer journey within the business, to process structuring (also focused on regulations), Go to Market and people engagement on the subject of security, and participation in the company's main strategic projects. Key activities: + Strategic planning for the area, aligning security with the business strategy + Structuring/managing the P&L, prioritizing investments, renegotiating contracts (focus on efficiency) + Drawing up the operational, risk, training and engagement matrix + Building security policies, processes and journeys + Monitoring existing/updated laws and regulations, such as the LGPD + Working with IT and OT security, with an eye on automation and operational efficiency + Leading Red Teams, Blue Teams, GRC and Access Management + Management of strategic projects, such as those focused on Cloud and MW (deficiencies and notes) + Market analysis, trends and new security technologies + Structuring internal audits (in-house and/or by hiring consultants) + Interface with IT, managing project portfolios (aligning security with each one) + Relationship with all the company's strategic areas + Performance management, structuring indicators and data, generating insights for all leaders + Presenting results and developments to the group's Board + Managing ˜30 people

Coordinator responsible for cybersecurity management, mainly of the access and GRC pillars, building strategic and operational plans, mapping the employee journey and analyzing risks to the business, interfacing with all areas of the group's companies. Key activities: + Strategic and operational security planning + Market analysis, trends and new technologies + Looking at the journey of the business and its employees, assessing cyber risks + Building policies, standards and procedures, supporting leaders in data governance + Drawing up a business continuity plan + Working with audits, such as SOX, PCI, ISO27001/27002, LGPD + Implementation and support of access and identity management (IAM) + Looking at automations, as well as compliance with SOX, PCI. Rbac and SoD + Strategies for training and engaging people on the subject of security + Interface with all the company's leaders + Management of 16 people

Working with Information Security, mainly in access control, Active Directory, Microsoft Exchang, Enterprise Vault Research for auditing, etc. Key activities: + Prospecting, implementing and administering the CA Identity Management System + Implementation of MDM solutions for digital certificates, especially in Latin America + Administration of TMG, ARS (Active Roles Server) + Management of integration projects through acquisitions and federations + Development of security policies for audits (SOX/ISO/PCI) + Knowledge of ITIL processes

Responsible for data links, upgrades, negotiations with operators, payment control, agreements, contracting, as well as configuring switches, routers, VoIP, ACS and authenticated networks, WiFi networks and data RFP projects.

Responsible for server and Telecom infrastructure, File Server rules, creation of Backup policies, migration of servers in the branches, close relationship with management and the board.

Suporte e atendimento a clientes Suporte N2 e Chat Fidelização/CRM