Information Security Leader

Fabio Martins

ad7b9p@r.postjobfree.com 857-***-****

linkedin.com/in/fsmartins/

**/****

Confidential - Not for Public Consumption or Distribution Security Privacy Cloud AI

Visionary and transformative Information Security and Privacy Executive with over 15 years of leadership and progressive experience in designing and implementing advanced security strategies within diverse environments. Recognized for leadership in establishing, scaling, and optimizing data protection, privacy, and AI risk management frameworks across a global organization. Demonstrated success in driving multidisciplinary teams toward exceeding strategic objectives in complex, regulatory-intensive industries. Proven expertise in navigating the evolving landscapes of HIPAA, GDPR, LGPD, CCPA, and other privacy regulations. Adept in fostering cross-functional collaboration to reduce organizational risk and data management while aligning with business goals. Committed to lifelong learning with a strong academic background, currently pursuing a PhD in Technology Management specializing in Cybersecurity and various industry certifications.

Education

National University (in progress), Deans List, Omega Nu Lambda National Honor Society

• PhD in Technology Management – Cybersecurity Specialization Cornell University (2023)

• Artificial Intelligence Strategy Certificate

Southern New Hampshire University (2021)

• Master of Business Administration – Technology Management – GPA: 3.979 Escola Superior Aberta do Brasil (2008)

• Graduate (Lato Sensu) – Computer Networks

Centro Universitário de Brasília (2005)

• Bachelor’s in Computer Engineering

Certifications

Recent Older

CDPSE – Certified Data Privacy Solutions Engineer (2021) CIPP/E – Certified Information Privacy Professional (2019) CCSP – Certified Cloud Security Professional (2018) GASF – GIAC Advanced Smartphone Forensics (2017)

CISA – Certified Information Systems Auditor (2017) CISM – Certified Information Security Manager (2017) CEH – Certified Ethical Hacker (2015)

VCP-DCV5 – VMware Certified Professional (2015)

RHCSA - Red Hat Certified System Administrator - RHEL7

(2014)

CISSP - Certified Information Systems Security Professional

(2014)

ITIL v3 Intermediate - RCV (2013)

MCSA - Microsoft Certified Solutions Associate (2012) MCITP - Server Administrator on Windows Server 2008

(2011)

MCTS - Windows 2008 Network Infrastructure (2011)

MCTS - Windows 2008 Active Directory (2011)

CLA – Novell Certified Linux Administrator (2010)

MCT - Microsoft Certified Trainer (2009)

MCSE 2003 - Microsoft Certified System Engineer (2008) MCSA 2003 - Ms. Certified System Administrator (2008) ITIL v3 – ITIL Foundations v3, EXIN (2008)

BCCPA - Blue Coat Certified Proxy Administrator (2008) NCSP - Nokia Certified Security Professional (2007) NSA - Nokia Security Administrator (2007)

LPIC-2 – Linux Professional Institute LPI (2007)

LPIC-1 – Linux Professional Institute LPI (2007)

CCSA/CCSE – Check Point Certified Security Expert (2006) TCSE - Trend Micro Certified Security Expert (2005) CompTIA Network+ Certified, CompTIA (2005)

CompTIA Security+ Certified, CompTIA (2005)

MCSE 2000 - Microsoft Certified System Engineer (2005) MCSA 2000 - Microsoft Certified System Administrator

(2005)

MCP - Microsoft Certified Professional (2004)

SCP – Sniffer Certified Professional, Network General (2004) RHCE – Red Hat Certified Engineer (2003)

Fabio Martins

ad7b9p@r.postjobfree.com 857-***-****

linkedin.com/in/fsmartins/

06/2024

Confidential - Not for Public Consumption or Distribution Professional Experience

Omnicom Group – 2023 – Present

Business Information Security Officer – Americas

• Spearheads corporate Information Security initiatives as a key member of the global Information Security leadership team, directing corporate security strategies across North and South America.

• Serving as the head of security for Flywheel Digital, a recent billion-dollar Omnicom acquisition, overseeing all security aspects and integrating the new business into Omnicom processes and standards.

• Leads multilingual security projects (English, Spanish, and Portuguese), assessing and enhancing infrastructure security for numerous agencies across North and South America, ensuring regional compliance and global security standards and privacy regulations.

• Oversees the security and privacy review and governance of all Artificial Intelligence projects, ensuring compliance with ISO 27001 and privacy regulations as the EU GDPR and Brazilian LGPD.

• Architect and implementer of the AI Risk Framework, establishing corporate-wide guidelines and best practices for the secure application of AI technologies.

• Author and champion of the Omnicom Global AI Policy, setting a precedent for global AI security and ethical standards.

• Serves as the senior representative for Security & Privacy on Omnicom’s AI Council, influencing corporate-wide AI strategies and decisions from a security and privacy perspective.

• Leads Omnicom’s Cloud Security efforts as the company moves its technology stack from IaaS to PaaS/IaaS & microservices.

Mass General Brigham – 2013 – 05/2023

Director of Data Protection (2022/2023) / Research Information Security Officer

• Directed three critical teams: Cloud Security, Data Protection, and Research Information Security, fostering a unified security strategy and enhancing interdepartmental collaboration and efficiency.

• Led the Information Security Executive team in data protection efforts, overseeing security and privacy for research across all Mass General Brigham hospitals.

• Coached and trained the BWH Data Protection team in alignment with Brigham Research Compliance.

• Orchestrated the Cloud Security Program, unifying security measures across Azure, AWS, and Google Cloud Platform, ensuring comprehensive cloud security management.

• Championed regulatory compliance initiatives, aligning the Information Security program with EU GDPR and other privacy laws to enable international collaborations.

• Directed the achievement of FedRAMP compliance for Azure, supporting the US's largest long- COVID research project, and led the secure migration of over 150 AWS workloads.

• Authored the draft Data Protection Policy, enhancing legal contracts with Information Security requirements and establishing robust data protection procedures.

• Pioneered the Research Risk Assessment program and redefined research data security review processes, ensuring the safe approval of research protocols by the Institutional Review Board.

• Fostered interdisciplinary collaboration and staff development, leading cross-functional teams and educational initiatives to navigate the complexities of data protection and privacy. Fabio Martins

ad7b9p@r.postjobfree.com 857-***-****

linkedin.com/in/fsmartins/

06/2024

Confidential - Not for Public Consumption or Distribution

• Designed and established all server security standards and cloud security standards across the organization, enhancing security for thousands of servers (5000+) Solucao Serviços Especializados – 2011 to 2012

Infrastructure and Security Manager

• Led five different infrastructure teams (50+ FTEs), enhancing monitoring and deployment efficiency in the Ministry of Social Development (MDS)

• Reduced cost of operations by merging the use of open-source and commercial technologies

• Consolidated Solução’s Information Security Program and Policies

• Directed operations for all Infrastructure and Security Design and Operations

• Established the Information Security program and built the teams responsible for the infrastructure (desktop support, server and operations, network, and security)

• Secured the “Bolsa Família” project, the biggest social development program in Brazil

• Structured a successful security program and incident response team

• Designed Security Policies for Brazil’s Ministry of Social Development

• Secured Open-Source (300 servers + storage) infrastructure + IBM Mainframe

• Designed and deployed infrastructure monitoring solutions, bringing incident response average times to less than 10 minutes

• Oversaw and led deployment to redundant multi-site firewalls and cache/proxying infrastructure, reducing bandwidth usage and security HTTP traffic Previous positions:

• Hepta Informatica (2008-2010)

• NCT Informatica (2006-2008)

• PSN: Security Analyst (2005-2006)

• Brasil Telecom: System Administrator (2004)

• DIAP: System Administrator (2003)

Languages

• English: bilingual proficiency • Spanish: limited working proficiency

• Portuguese: bilingual proficiency (native) • French: elementary working proficiency Organizations

• ISC International: Member

• ISC Eastern Massachusetts Chapter: former president

• CISO Executive Network, Boston Chapter: Member

• Cloud Security Alliance, Boston Chapter: Member

• IAPP – International Association of Privacy Professionals: Member

• ISACA International: member

• ISACA New England Chapter: Member

• National Society of Leadership and Success: member

• Mass Cyber Center: mentor

• American Corporate Partners (ACP): mentor

• SecureWorld Boston: advisory council

• Omega Nu Lambda National College Honor Society: Member

Contact this candidate