• Responsible for the day-to-day administration, monitoring, and continuous improvement of Equity Resources' cybersecurity program • Serve as the technical lead for security operations, Microsoft 365 security, identity and access management, data protection, AI governance, vulnerability management, incident response, and enterprise network security while partnering with business stakeholders to protect company and customer information • Duties include Security Operations and Incident Response, Network Security, Microsoft 365 Security Administration, Data Protection, AI Governance, and Microsoft Purview, Identity and Access Management, Vulnerability and Risk Management, Compliance and Governance

• Work to protect corporate data and information, being responsible for the implementation, administration and evolution of Data Loss Prevention (DLP) and Data Governance solutions in the Microsoft ecosystem. • Implement, administer and maintain Data Loss Prevention (DLP) policies in Microsoft 365 environments and corporate devices. • Configure, review and optimize data protection policies using Microsoft Purview. • Continuously monitor events and alerts related to data protection, conducting incident analysis and investigations. • Identify and mitigate risks related to the leakage of confidential information. • Implement and administer sensitivity labels, classification and document protection policies. • Manage retention policies and information lifecycle (Data Lifecycle Management) and support Records Management initiatives. • Support eDiscovery, Communication Compliance and security audits when required. • Manage email protection capabilities using Microsoft Defender for Office 365.

• Act as a Data and Information Security Analyst with a technical and consultative focus on protecting sensitive data and information. • Responsible for implementing and maintaining classification, labeling and protection policies, as well as Data Loss Prevention (DLP) technologies and regulatory compliance, ensuring the secure lifecycle of information. • Work with Microsoft Information Protection, Microsoft Purview and Data Loss Prevention (DLP) to identify, classify and protect sensitive data across data infrastructures, endpoints, e-mail, SharePoint, Teams, OneDrive, etc. • Configure DLP policies based on financial, contractual and regulatory information (LGPD, SOX, PCI-DSS). • Continuously improve DLP policies based on events, false positives and exception cases. • Monitor DLP alerts, perform analysis and collaborate with incident response teams. • Support investigations conducted by other teams by providing technical input and context on DLP policies, classification rules and potential leakage vectors. • Work together with Data Stewards. • Conduct mapping, categorization and classification of critical/sensitive data. • Define and maintain OKRs and maturity indicators related to technical data governance and leakage prevention activities. • Demonstrate results through dashboards, executive reports and technical evidence. • Ensure compliance with standards and legislation such as LGPD, GDPR, SOX, HIPAA, PCI-DSS, ISO 27001:2022 and NIST. • Support internal/external audits with compliance evidence related to DLP, classification and governance. • Conduct trainings, workshops and awareness campaigns on secure use and classification of information.

• Work with Microsoft Information Protection, Microsoft Purview and Data Loss Prevention (DLP) to identify, classify, and protect sensitive data across data infrastructures, devices, email, SharePoint, Teams and OneDrive. • Continuously improve DLP policies based on events, false positives and exception cases. • Monitor DLP alerts, perform analyses and collaborate with incident response teams. • Support investigations conducted by other teams by providing technical inputs and contextual information about DLP policies. • Work together with Data Stewards who act as focal points to ensure data quality, appropriate use, security and correct data classification. • Conduct mapping, categorization and classification of critical/sensitive data, aligning with the owners of each data domain (e.g., finance, legal, HR). • Define and maintain OKRs and maturity indicators related to technical data governance and data leakage prevention activities. • Ensure compliance with regulations and legislation such as LGPD, GDPR, SOX, HIPAA and PCI-DSS.