Rangel Rodrigues

BISO | Information Security and Risk | CISSP | CCSP | CCSK | CCTZ

As a Security Architect, I am responsible for identifying and documenting risks that may impact the business and addressing them regularly with business units. I have more than 15 years of experience in information security, compliance, and cloud technologies, working with diverse industries and clients across Latin America and US.

I also have experience in designing and managing technical compliance programs using frameworks and regulators in Brazil and Mexico such as Banxico, CNBV, BACEN, CVM, ANBIMA, ANPD, and their respective information security and privacy laws.

Supported with internal and external IT audits, Cyber Risk Management, GRC, SLDC secure, DevSecOps, BCDR, and Information Security. Strong understanding of information security principles and industry best practices and frameworks, such as ISO/IEC 27000 family of standards, ITIL, COBIT, SABSA, NIST 800-53, NIST Cybersecurity Framework, NIST AI RMF, Cloud Security Alliance (CSA) Cloud Security Matrix (CMM), PCI-DSS, SSAE-18 (SOC 2), MITRE ATT&CK and CIS.

I have a deep technical understanding of security technologies, protocols, firewalls, hardening, encryption, PKI, malware protection, EDR, CWPP, CSPM, CNAPP, IDS/IPS, WAF, and cloud security.

My mission is to ensure the security and resilience of applications and services while enabling the business to grow and innovate. I am passionate about teaching and sharing my knowledge as a professor and a volunteer at various information security events and organizations.