Ygor Moretti

CertSimples is a IT consulting company, there we are able to support many clients in solve their infrastructure and security major issues.

Currently working as a IT & IS manager I already had the following responsibilities:

• To lead different projects such retrofitting network infrastructure; deploy endpoint protection; start structuring finops area.
• Developed and maintained relationships with customers and suppliers through account development.
• Cross-trained existing employees to maximize team agility and performance.
• Maximized performance by monitoring daily activities and mentoring team members.
• Onboarded new employees with training and new hire documentation.
• Managed and motivated employees to be productive and engaged in work.
• Planned and budgeted accurately to provide business with resources needed to operate smoothly.

TAG is a Financial Market Infrastructure (FMI) company. There I had the opportunity of being part of many different teams. I had started my journey in TAG structuring InfoSec team, then I moved to Infrastructure team to rebuild Cloud Services and Database Teams and build from the scratch the Command Center.

As security manager I was responsible for implement CASB/SASE solution; Endpoint Protection and Endpoint Detection Response and many other solutions.

As infrastructure manager I was responsible to reformulate Cloud Team adopting the Cloud Center of Excellence methodology; Work in Finops reducing our cloud costs in almost 80%; Implement an observability center by creating all business indicators; re-structure our databases and improving their cost efficiency and many other improvements.

There I also:

• Aligned multi-teams efforts behind unified solution promotion strategies, creating overarching strategies for customer guidance and communication.
• Investigated product fault trends, analyzing negative feedback and returned product reports for evidence of problematic development and production practices.
• Maintained deep technical background knowledge in Google Cloud Provider (GCP) parameters in order to facilitate authoritative communications between developing, architecture, security and cloud teams.
• Led technical upgrade projects for TAG by working and coordinating with consultants and developers for integrations.
• Coordinated secure system access of users to various department systems and platforms.
• Demonstrated creativity and resourcefulness through development of innovative solutions.
• Worked effectively in fast-paced environments.

Zoop is a Fintech Enabler, providing financial services and payment solutions.

Joined Zoop initially to lead the monitoring team (NOC) and in less than 2 months I took over the Information Security team.

• I had made improvements in PCI process which led us to PCI-DSS re-certification.
• Adherence to Central Bank circulars and normatives.
• Adapt our process and IT structure to GDPR (LGPD - local acronym)
• Implementation of many different security solutions as Jumpcloud, Crowdstrike, Tenable, Netskope and so on.
• Security Awareness Training.
• Implementation of Security and Fraud Incident Response Process
• Oversaw development and implementation of improvements to support network operations.
• Wrote strategic business plans outlining need for departmental information technology resources.
• Coordinated secure system access of users to various department systems and platforms.
• Liaised with other departments to minimize network interruptions and possible downtimes.
• Analyzed network security and current infrastructure, assessing areas in need of improvement.
• Managed life cycle replacement of hardware and software.

I supported other initiatives as temporally manage Database and Service Desk teams

ByteMe was built to help startups and medium companies to ideate, design and develop their products and projects.
At ByteMe I was responsible for dealing with customers, presenting weekly evolution reports of their products, manager development and SysAdmin teams, using agile management.

• More than 10 projects developed and implemented in more then 1 year
• Established foundational processes for business operations.
• Conducted target market research to scope out industry competition and identify advantageous trends.
• Developed key operational initiatives to drive and maintain substantial business growth.
• Aligned organizational objectives with company mission to increase business growth and integrate work strategies.
• Developed marketing materials and campaigns to boost brand awareness and customer engagement.
• Conducted target market research to discover customer needs and analyze competitor trends.

Stone Payment is one of top 5 acquirers in Brazil, with 4 Data Centers in the USA.

As infrastructure manager I was ahead of project like Data Center migration, PCI-DSS certification, IT Process and Black Friday operation planning

• Tested network's performance and created strategies to maintain integrity of overall infrastructure.
• Provided onboarding and mentoring of newly hired employees, offering positive reinforcement.
• Worked in team-driven environments and communicated effectively with stakeholders.
• Installed and managed VPNs, firewalls and anti-malware solutions.
• Identified server hardware and network system issues, performing troubleshooting techniques for remediation.
• Managed life cycle replacement of hardware (data center) and software.

Hired to Rio2016 as security analyst I had the opportunity to be part of one of the biggest events all over the world. There I was responsible to plan and implement initial security measures and tools. Later, being promoted to Security Specialist I was able to participate on the planning of the Rio2016's backbone and security architecture. Closer to the end of the event shifted to operational mode, running 24x7 and there I was responsible to lead the security defense team (more than 15 people) until the end of games.

I also was the following attributions:

• Managed information system regulatory compliance to meet updated guidelines.
• Contributed system roadmapping, design and launch services to address information vulnerability.
• Implemented VPN client-to-site and site-to-site; Firewalls, IPS's (Cisco and Paloalto solutions), administration and monitoring firewalls, intrusion detection systems and anti-virus software to detect risks.
• Implemented endpoint protection (Symantec) and many other services, monitoring computer virus reports to determine when to update virus protection systems.
• Partnered with IT department members to minimize exploits on system coverage.
• Consulted with team members to assess flawed root causes and plan for remediation.
• Conducted security audits to identify vulnerabilities.
• Monitored use of data files and regulated access to protect secure information.
• Reviewed violations of computer security procedures and developed mitigation plans.
• Investigated and resolved incidents of unauthorized access to sensitive information.
• Worked with other teams to enforce security of applications and systems.

The Information Security technologist applies principles of confidentiality, availability and integrity to protect the information of public, private and third sector companies.