Heitor Melo

Background

About Heitor Melo

Cybersecurity professional with over a decade of experience in programme and project management, and more than eight years leading strategic initiatives in security strategy, governance, risk management, compliance, and assurance. I currently serve as Special Projects Manager at SEK, a leading Latin American cybersecurity services provider. In this role, I lead high-impact comprehensive programmes focused on Cyber Security & Resilience and Security Operations Centers (SOC) implementation. My responsibilities include designing innovative cybersecurity frameworks, managing executive and C-level relationships, and aligning technical initiatives with strategic business objectives. Previously, at IBM and PROOF, I led Security Strategy, Governance, Risk, and Compliance (GRC) consulting initiatives and teams, delivering transformative security strategies and risk management programmes for clients in sectors such as financial services, critical infrastructure, and manufacturing. This experience has allowed me to excel in translating complex cybersecurity issues into clear, strategic insights for executive stakeholders. My technical expertise encompasses ISO 27001, ISO 27701, ISO 22301, NIST CSF, COBIT, ITIL, GDPR, LGPD, NIS 2 Directive, Digital Operational Resilience Act (DORA), US SEC Cybersecurity Rules, and PCI-DSS. I bring hands-on experience on strategic planning, security governance, risk management, data privacy and business continuity. As a Lecturer in Information Security at Instituto Infnet, I remain engaged with current cybersecurity threats and best practices, bridging theoretical knowledge with practical industry applications. My academic qualifications include an ongoing MSc in Cyber Security at Royal Holloway, University of London, an MBA in Information Security, and a BTech in Cyber Defence. Certifications as ISO 27001 & ISO 22301 Lead Auditor and ISO 27701 & ISO Implementer reinforce my commitment to excellence and adherence to global best practices in information security, privacy, and risk management. I operate at the strategic level of roles such as Head of Cybersecurity, Business Information Security Officer (BISO), or Chief Information Security Officer (CISO), continuously advancing my leadership and technical expertise to drive resilient, business-aligned security programs. My focus remains on protecting critical assets and enabling innovation in the face of evolving cyber threats. The views expressed on this profile are my own and do not represent those of my employer. I do not respond to unsolicited commercial approaches.