Lucas Galvao

Consultor de Proteção de Dados

ABRACAM Associação Brasileira de Câmbio

May 2024 - Current (2 years 4 months)

- Consultor - Instrutor Educacional

Founding Partner - Vanta’s #1 LATAM & Iberia - VAD

Vanta

Jun 2023 - Current (3 years 3 months)

I created and lead Latin America’s only independent GRC distribution layer: the right tools, the right partners, and the right execution.

CEO & Founder

Open Cybersecurity The Trust Builders

Jan 2023 - Current (3 years 8 months)

Enterprise GTM supporting Vanta’s growth by facilitating enterprise sales cycles, bringing regional expertise, and helping companies build and prove trust with confidence.

M

Confounder

Mission Command acquired by Open HQ

Feb 2018 - Mar 2023 (5 years 2 months)

Founder of the company and creator of the cloud platform Mission, focused on management and automation of business processes in the health area. As an entrepreneur, actively participated in the development of the SaaS product, managing sales, product strategy, marketing and partnerships. Platform stacks: C#, MySQL, JQuery, AWS.

Information Security Consultant

Data Security Serviços em Segurança de Dados Ltda

Oct 2016 - Dec 2017 (1 year 3 months)

I worked as an information security consultant, leading compliance projects and audits in standards such as PCI/DSS, GDPR, ISO27001, ISO 22301, ISO 31000 and SOC 2. I developed the first SOC 2 Report (Type 2) for the Certisign Signature Portal, ensuring certification and approval in the LATAM accreditation process. Collaborated with SPC Brasil in the creation of Business Continuity Plans and Business Impact Analysis (BIA). On the technical front, I gained experience in OWASP standards, OSSTMM, NIST 800-115, SDLC and tools such as Kali, Nessus, Checkmarx DAST/SAST and Wikto. This experience allowed me to develop an innovative approach to Pentest (Web Application) in my undergraduate thesis. Later, I was invited to manage data protection in a

Information Security Analyst

Data Security Serviços em Segurança de Dados Ltda

Nov 2015 - Sep 2016 (11 months)

Positioning constant learning as a central aspect of his life, extended, in a structured way, work in the technical and procedural area with Data Security's customers and business partners. With direct contact with problem situations and different customer contexts, was able to apply in practice methodologies, frameworks and good security practices in technical and data security compliance projects. Conducted structuring activities in information security involving Pentest, strengthening of servers, documentation of computer incidents, maintenance of control bridges, access and identity management mechanisms, supporting the fulfillment of legal demands for information security for medium and large companies. Directly participated in promin

Information Security Internship

Data Security Serviços em Segurança de Dados Ltda

Sep 2014 - Nov 2015 (1 year 3 months)

It was at Data Security that he had the first opportunity to work with information security. Until then, had only worked as an information technology researcher and educator at the Municipal Department of Education of São Paulo/SP. Was able to advise on the provision of advisory services, computer forensics and electronic crime prevention, serving medium and large companies in Brazil and abroad. Supported the project area in the development of policies and procedures for customers, business continuity plans, auditing of PCI/DSS standards, ISO 27000, NIST Cybersecurity Framework (CSF), implementation and administration of security tools and, perhaps most importantly , of a change of mentality - a process that transformed his way of seeing t

Facilitador de Ensino - Ciência da Computação

Secretaria Municipal de Inovação e Tecnologia

Mar 2012 - Oct 2013 (1 year 8 months)

About

Detail

Timeline

Résumé