Information security · Privacy · GRC
Between the contract
and the code.
I'm a lawyer and have worked in information security and data protection since 2019. Today I'm CIO and co-founder of Data Guide, and I teach privacy, security and AI.
200+ clients in data protection (LGPD) and security certifications, across Latin America, Europe and the United States.
I hold degrees in Law and in Cyber Defense, and a postgraduate degree in Offensive Security and Cyber Intelligence.
I have worked in data protection and information security since 2019. As a lawyer, I focused on contracts for technology, innovation and investment companies. I have also worked as a Security Engineer and as a DPO, implementing and maintaining ISO 27001, ISO 27701, SOC 2 and PCI DSS programs.
My work sits on the bridge between the technical and the legal: the vulnerability that becomes audit evidence, the incident that calls for response and communication, the LGPD rule that has to become a control in the system.
A GRC consultancy based in Florianópolis, Brazil. There I'm responsible for improving, running and implementing its products: security as a service, DPO as a service, cyber insurance and certifications.
Day to day: incident response, vulnerability assessment, application and cloud security, LGPD and GDPR projects, and readiness for ISO 27001, ISO 27701 and SOC 2.
dataguide.com.brStrategic Advisor in cybersecurity, infrastructure and AI governance
Security across the development lifecycle, with SAST and code review; governance for the responsible use of AI, with guardrails for LLMs and LangChain; and infrastructure and cloud hardening.
Privacy and data protection instructor
At DPOnet's professional education brand: LGPD governance, preparation for the EXIN PDPF, PDPP and DPO certifications, and ISO/IEC 27001 fundamentals.
AI instructor for lawyers
How to use AI in contract analysis, research and productivity.
Cybersecurity training instructor
Programs on cybersecurity, information security, LGPD, GDPR, secure development, cyber defense and compliance.
Lawyer
Legal counsel for technology, innovation and investment companies, focused on contracts such as NDAs and data processing agreements (DPAs).
The certifications behind the work of implementing and auditing security, privacy and compliance programs.
CompTIA
QMS Certification Brasil
TIexames
TIexames
TIexames
TIexames
TIexames
QMS Certification Brasil
IAPP
IAPP
And I keep studying.
Course
DevOps Professional
MBA
Governance, Compliance and Risk
Postgraduate degree
Offensive Security and Cyber Intelligence
Undergraduate degree
Cyber Defense
Postgraduate specialization
Law
Undergraduate degree
Law
Chapter 21: using open source tools to comply with the LGPD security principle.
See at Livraria RT
Chapter 9, with Taynara Rodrigues Bernardo and Patrícia Ilha Schuelter: data protection law in health care, protecting health, the user and the professional.
Read the chapterFor IT, Law, Information Security and Systems Management professionals and students, and people in related fields, who want to apply privacy from system design all the way to LGPD and GDPR compliance.
To talk about a project or an idea, send me an email. If you prefer, I'm on LinkedIn and Instagram.
