Paulo Ferreira

Information Security Manager @ Safra

About

Information Security professional with over 13 years of experience, with a solid background in the financial, retail, and industrial sectors. Currently leading the CSIRT, Red Team, and Application Security (AppSec) areas at Bank Safra, driving strategic initiatives for incident prevention and response, strengthening development pipelines (DevSecOps), and enhancing the bank’s cyber resilience. My work is focused on integrating critical IT, security, fraud prevention, and development areas, applying offensive and defensive strategies to ensure a comprehensive and layered security approach. Proven track record in implementing security projects, automating processes, leading multidisciplinary teams, and managing complex cyber crisis scenarios.

Country

Brazil

City

São Paulo

Industry

Banking

Skill

Análise de dados, Desenvolvimento de time, Liderança de equipe, Resiliência, Automação, Liderança, Resposta a incidentes, Estratégia, Prevenção contra fraude, red team, Inteligência de ameaças cibernéticas (CTI)

Experience

Information Security Manager

Safra

2021-11 - Present · 4 yrs 11 mos

São Paulo, Brasil

Leadership of Incident Response (CSIRT), Offensive Security, Threat Intelligence, Red Team, and DevSecOps teams, strengthening cyber defense across digital channels and core banking environments. Integration of SOC, infrastructure, fraud prevention, and development operations to enable cohesive offensive and defensive security strategies. Executive-level reporting of security KPIs and results, supporting strategic decision-making and compliance with internal and external audits, including BACEN, SUSEP, CVM, PCI DSS, and B3 PQO

Information Security Coordinator

Porto

2020-6 - 2021-11 · 1 yr 6 mos

Sao Paulo, Brazil

Led the Information Security Consulting team, supporting the business units’ digital initiatives to ensure alignment with appropriate risk levels and organizational security policies. Also responsible for designing security architecture for key projects under the Information Security Director’s roadmap, ensuring secure delivery and compliance with regulatory standards.

Information Security Audit Coordinator

Itaú Unibanco

2018-11 - 2020-6 · 1 yr 8 mos

São Paulo Area, Brazil

Led the Information Security Audit team, overseeing control testing, scope definition, planning, and execution of information security audits. Accountable for presenting audit results and risk findings to senior leadership, supporting compliance and continuous improvement across audited areas.

Information Security Coordinator

GPA

2016-4 - 2018-11 · 2 yrs 8 mos

São Paulo e Região, Brasil

Led the Information Security team across multiple brands including Extra, Pão de Açúcar, Assaí, and corporate operations, with a focus on enhancing security maturity. Responsible for: Secure Development and Vulnerability Management Awareness and Security Culture Programs Risk Analysis in Strategic Projects Incident Response and Security Architecture Implemented security solutions such as SIEM, Cloud Proxy, Anti-APT, Password Vaults, and MDM, among others, with a strong focus on governance and operational efficiency.

Senior Information Security Analyst

GPA

2013-9 - 2016-3 · 2 yrs 7 mos

São Paulo e Região, Brasil

Responsible for processes including Risk Analysis, Security Awareness, Third-party Governance (IBM and SYMANTEC), and PCI DSS compliance across Extra, Pão de Açúcar, and Assaí brands. Developed and presented risk reports to executives, created and reviewed policies, standards, and security baselines, and assessed new security technologies and controls. Also provided information security consulting to IT and business units, ensuring alignment between security and business strategy.