Rafael Sant'Anna

Hands-on Information Security professional with 15+ years of experience securing hybrid cloud infrastructure, implementing compliance-aligned security programs, and supporting enterprise risk initiatives. Strong expertise in Microsoft 365, Azure, Entra ID, and endpoint defense platforms such as Microsoft Defender and FortiEDR. Proven success developing and enforcing GPOs, IAM policies, vulnerability management, and audit documentation aligned to ISO 27001, NIST, and LGPD/GDPR/HIPAA frameworks. Passionate about enabling secure operations through scalable solutions and cross-functional collaboration.

Versatile IT professional with 15+ years of experience spanning infrastructure management, cybersecurity, and governance. Skilled in building secure Microsoft 365 and Azure environments, implementing ISO/NIST-based frameworks, and aligning IT strategies with business objectives. Proven ability to lead cloud migrations, disaster recovery programs, vulnerability management, and policy development while enabling teams to adopt innovative technologies securely. Recognized for driving measurable improvements in security posture, operational resilience, and cost efficiency.

• Postgraduate Program in Cybersecurity – University of Texas at Austin, McCombs, 2025
• Cybersecurity: Managing Risk – Harvard University, 2024
• Bachelor of Information Technology Management – Estácio de Sá University, 2023