ANDRE MACHADO DA SILVA

Seasoned Cybersecurity Leader with over 20 years of experience in enterprise security architecture, risk management, and regulatory compliance. Proven expertise in cloud security (AWS, Azure, GCP), zero-trust frameworks, and cyber risk mitigation to safeguard critical business assets. Adept at aligning security strategies with business objectives, ensuring compliance with SOC 2, PCI-DSS, HIPAA, GDPR, and NIST standards. Strong track record in incident response, penetration testing, security governance, and vendor management, driving enterprise-wide security transformation and resilience. Demonstrated ability to lead cross-functional teams, develop security roadmaps, and implement threat intelligence programs to proactively combat emerging cyber threats. As a Chief Information Security Officer (CISO) candidate, passionate about fostering a security-first culture, optimizing security operations, and leveraging cybersecurity as a business enabler in fast-paced, high-growth environments.

• Rapid7 - InsightVM Certified Administrator, 2021
• Rapid7 - InsightAppSec Certified Specialist, 2020
• Safetica DLP – Safetica Certified Associate, 2021
• OneTrust Fellow of Privacy Technology, 2021
• AlertLogic Log Manager Certified Specialist, 2018

• Enhanced Enterprise Security Posture: Designed and implemented security frameworks aligned with SOC 2, GDPR, HIPAA, ISO 27001, and NIST, strengthening compliance and risk management.
• Zero Trust Security Implementation: Successfully deployed Zero Trust Network Access (ZTNA) and advanced IAM policies, minimizing unauthorized access risks across cloud and on-prem environments.
• Threat Intelligence & Risk Reduction: Developed proactive threat intelligence programs, reducing cyber risks by identifying and mitigating vulnerabilities before exploitation.
• Incident Response & Crisis Management: Led security incident response initiatives, ensuring rapid containment, forensic analysis, and remediation to minimize business impact.
• Security Automation & DevSecOps Integration: Developed automation scripts in Python, Bash, Terraform, and PowerShell, streamlining security monitoring, compliance enforcement, and vulnerability management.
• Cloud Security Hardening: Strengthened AWS, Azure, and GCP security controls by implementing encryption, IAM policies, and cloud monitoring, improving overall security posture.
• Security Awareness & Training: Designed and launched cybersecurity training programs, reducing human related security incidents and improving employee awareness of emerging threats.