1. Mônica Barbosa Yoshida
_____________________________________________________________________________________________________________________________________________________________
Av. Ramalho Ortigão, 374 – Apto. 151
Saúde – São Paulo – CEP 04130-010
Celular: (55-11) 98383-1408
E-mail: monica.yoshida@gmail.com
Objective: Information Security - System Engineer (Pre Sales)/Project Manager
Qualifications
● Over 20 years of activities on Information Security and Process, working in companies as Pirelli, Otis Elevators, Techne, Baan,
ISS - Internet Security System, VisaNet, Disec, NEC, iBLISS, NET, Cipher S.A.;
● Broad knowledge in Information Security, Networking, Database, ERP and Supply Chain;
● Skills in Pre-Sales, Commercial, Project Management and Training, with a technical/commercial profile;
● I believe in interpersonal relationships as a factor which creates new business opportunities, keeping excellent relationships
with customers;
● Entrepreneur style executive, maturity to withstand strong competitive pressure environments and new challenges. I do a
great job in teamwork, generating positive results and surpassing the goals set. I am pro-active, extremely versatile and
committed to the mission and ethics in the workplace;
● Solid academic background and advanced English. I have done several international trips (USA and Europe) in professional
activities and training;
● Strong knowledge in ITIL, COBIT and compliance with Sarbanes Oxley, PCI, HIPPA.
● Strong knowledge in PMI, using this as guide to mange projects in IT.
Achievements
● Experience in sales area of security services in a startup company being responsible for 80% of company’s revenue. Services
are focused in Vulnerability Assessment, PenTests, Gap Analysis, Security Baselines and Body Shop for Security Department;
● Project Management of consulting services in information security doing demands and projects analysis inside the customer
as part of project group defining security steps and needs;
● Experience in development and management of partners, to deliver the complete solution to the customer;
● Experience in commercial and business as consultant focused on information security, managed services sales from a
partnership between NEC and VeriSign, the global leader, from the creation of a solution, preparation of technical proposals to
business participation in the price negotiation with end customers;
● Part of sales process activity from presentations to the customer to closing and preparation of contracts, being part of the
entire process;
● Interaction with the foreign partners as VeriSign (USA) for development projects and commercial proposals, and visi ts to
customers in Brazil;
● Evaluation of products and national and international partners for the segment of Information Security to update the portfolio
of the company;
● Presentations to customers and business events in the segment;
● Expertise in Pre-Sales and Business development activities, consulting and developing solutions for Information Security
(managed security services, such as Firewall, Anti-Spam, Content Filter, IPS and so on.) Development of MS applications (Dot
Net), system factory testing of networks and projects (applications management services, improvement of performance,
troubleshooting and analysis);
● Project Management and deployment of managed services for information security and networks. Process and procedures for
Quality Assurance in monitoring post deployment (reports of metrics based on SLAs pre-agreed);
● Project Management of Information Security, consulting and deployment of MSS involving Firewall, Anti-Spam, Web Gateway,
Content Filter, IPS;
● Project involving McAfee, Imperva, Fortinet, Palo Alto Solutions;
● Implementation of managed services and post deployment monitoring, with reports with metrics based on pre -set SLAs;
● Auditing and monitoring projects of technology to meet security requirements based on ISO 27002 (ISO 17799);
● Security Policies Development and security standards based on ISO 27002 (ISO 17799).
● Participation in the startup area of Information Security, working on the development and implementation of the Security
Information Director Plan with external consultants.
● Security auditing for products (Visanet.com.br Site, POSWeb, E-Commerce, among others) available for commercial
establishments seeking to maintain the integrity and confidentiality of customer data;

2. ● Definition from the area of Systems and Products of the requirements for access control to systems;
● Development of internal projects RFP's management of information security as Classification and Information Management;
Identity.
● Planning and general coordination as well as technical development of commercial proposals from the technical definition of
the scope to the formation of prices to be submitted to the client;
● Development of proposals for business and consulting services, network architecture review, vulnerabilities analysis, training
and supply of products/software & complete solutions;
● Presentation of techniques, products & solutions of network security, internet and e-Commerce to customers, partners and
sales representatives; internal training program administered to the sales of the company;
● Active participation in the process of closing contracts with customers.
● Working as PMO in IT projects, for all segments, security, telecom, infrastructure.
College Formation
● Graduation: Electric Engineering focused on Electronics Engineering – FAAP – Faculdade de Engenharia Fundação Armando Álvares
Penteado - graded in1989;
● Post-Graduation: Industrial Administration focused in Marketing & Products Management – USP/POLI/Fundação Vanzolini – graded
in 1992;
● MBA: Strategical Business Management – Instituto de Tecnologia Mauá – graded in 2000.
Professional Background
Resource - UBS Swiss Bank 05/2015 – 02/2016
Information Security Consultant/Business Analyst/ Project Manager in Information Security
• I work as a consultant, allocated to customer, information security projects such profile and entiltlements review for financial
applications. Based on these reviews suggest necessary controls and adjustments to avoid conflicts of segregation of duties. As resulto
implemente new mesures for access control considering all employees process, joinner, mover and leaver.
CIPHER SA 05/2012 – 04/2015
Project Manager in Information Security
• I worked as a Project manager, managing consulting, integration and operation MSS projects, allocated customers from different
segments. Examples of projects are ISO 27002 Gap Analysis, PCI DSS assessments for GAP or certification, SOX, business continu ity
plans, Risk assessments, master plans information technology, implementation of security solutions technologies. At Cipher, p roject
managers are also responsible for technical sales. So, I also worked in sales support, having the opportunity to the definition and
design of the solution and the proposal.
ISH Technology 02/2012 - 05/2012
Consultant in Information Security
• I work as a consultant, allocated to customer, information security projects such as ISO 27002 Gap Analysis to, business continuity
plans and master plans for information technology.
ART IT (Allocated in .NET Services) 08/2011 - 12/2011
PMO
• I work as PMO, allocated client, monitoring and management of IT projects and TELECOM, responding to the client's project office,
following PMI requirements and using tools controls client internal projects.
Ibliss (Allocated in NET Services) 10/2009 - 08/2011
Consultant in Information Security and Project Manager
• I work as a consultant and project manager, allocated client, focused on analysis of demands and, defining and managing security
activities necessary to applications and infrastructure development projects, applying the best information security practices across the
business.
• I work in the commercial area as a business consultant focused on Information Security, in the sale of services aimed at IT
diagnostics, implementation of safety devices, environmental assessment and penetration testing.
• Accompany the sales process from the beginning, working in presentations to the client until the closing and preparation of proposals
and contracts.
NEC Brazil SA 07/2008 - 08/2009
Security Solutions Engineer info (SE)
• I worked in the commercial area as a business consultant focused on Information Security, in selling managed services (MSS -
Managed Security Services), the result of a partnership between NEC and VeriSign, the world leader in this segment, develop ing
technical and commercial proposals, participating in price formation and negotiation with the end customer, with gains rate o f 70%
proposed.
• Monitored the sales process from the beginning, working in presentations to the client until the closing and preparation of contracts,
reducing the sales cycle time by 50%.
• Participated in the evaluation of products and national and international partners for the information security segment to adjust
portfolio.

3. EJKronnen 03/2006 - 06/2008
Project Manager
• Coordinated technology projects to meet security requirements based on ISO 17799 (BS 7799), working in pre -audit and risk
management and development of technical standards.
DISEC Security Services 04/2005 - 02/2006
Project Manager
• Worked in Pre-Sales and Business exercising consulting and development of Information and Network Security solutions projects
(application management services, performance improvement, troubleshooting analysis).
• Managed projects and deployment of managed information security services and networks. Quality Assurance processes with post-
deployment monitoring (based metrics reports on pre-established SLAs).
• Managed Security Services projects info including tools such as Firewall, Anti-Spam, Content Filtering, IPS; adapting the same
customer needs.
VISANET 08/2002 - 11/2004
Specialist in Information Security
• I was part of the team that started the Safety Area info, participating in the creation and implementation of the Master Plan of the
same, developed by an external consultant.
• Contributed in product design (Site Visanet.com.br, POSWEB, E-Commerce, etc.) available to Shops order to maintain the integrity
and confidentiality of customer data,
• Worked with the Systems and Products area in defining requirements and access controls to systems; RFP's managed internally
developed security projects of information as Information Classification and Identity Management, both with successful implementation
in relation to needs and deadlines.
DMR Consulting - Fujitsu Company 12/2001 - 07/2002
Specialist Consultant in Information Security
• I worked in consulting, managing projects Security of Information, primarily targeted at development of application systems .
Internet Security Systems 01/2000 - 11/2001
Pre-Sales Manager (System Engineer Manager)
• I was responsible for commercial customer presentations and events segment.
• Worked in coordination of Pre-Sales area developing consulting and development of information security solutions (managed security
services such as Firewall, Anti-Spam, Content Filtering, IPS, etc), contributing since the formation of price, proposal development and
monitoring of account managers to customers for presentation of the proposed solution.
• Contributed to the creation and implementation of SOC Embratel.
• Trained staff in technical product & network security solutions, internet and e-commerce for customers, partners and sales
representatives.
BAAN Company 02/1997 - 01/2000
Senior Consultant
• I worked in consulting, implementing ERP BaaN IV system. Among the modules has been mainly active in the control module (tools),
making installations, database migration, and monitoring to achieve better performance. Implemented Supply Chain system.
[In 1996, he began his career as a Systems Analyst and Microsoft Certified Trainer in Techne Engineering and Systems SA, deploying
e-mail systems and Microsoft Networks].
Idioms
● Fluent English
Training & Off Country Trips
● Nuclear Physics (trainee) at Weizmann Institute of Science, Rehovot - Israel
● Microsoft Certified Trainer in Internetworking (Windows NT/Networking/TCP/IP)
● Oracle Administration Courses
● Certification & Training in the Safety Standard BS 7799 (ISO 17799) – BSI UK
● Internet Security Systems Courses (Intrusion Detection & Scanners) - EUA
● Firewall & VPN Checkpoint Training - EUA
● Appliances Nokia – Firewall & Intrusion Detection Training – EUA
● Project Management – PMI Method – Visanet
● Certification & Training - Qualys Guard Vulnerability Management – Qualys (NEC)