Romeu Filipe Dos Reis Rebocho

KPMG PORTUGAL                                                                                  Lisbon, Portugal

Cybersecurity Consultant                                                                      Dez 2024 – Present

•     Developed proposals for public sector on cybersecurity and privacy initiatives, with emphasis on legal, regulatory, and compliance standards, strengthening critical infrastructure.

•     Defined and analyzed cybersecurity KPIs to measure system maturity, performance, and risk posture, recommending actionable improvements to strengthen defense.

•     Conducted physical security assessments, mapped control gaps, and recommended mitigation strategies to reduce organizational risk exposure.

•     Monitored, assessed, and prioritized vulnerabilities in banking sector systems, implementing mitigation plans that reduced exposure to high-risk threats.

•     Managed third-party risk through the development of onboarding and continuous evaluation frameworks.

•     Developed and delivered cybersecurity awareness and compliance training programs.

•     Reviewed and enhanced internal policies and compliance documentation to strengthen governance and ensure regulatory alignment.

•     Performed cloud security audits and in-depth testing of security controls to assess design, implementation, and operational effectiveness, providing risk classification and improvement recommendations.

DIUSFRAMI PORTUGAL, LDA                                                                Sintra, Portugal

Field Service Technician/ Customer Support | Smart Payment Terminals Aug 2021 – Dec 2023

•     Configured and secured smart payment terminals, ensuring compliance with company policies and regulatory standards.

•     Reduced client downtime by effectively identifying and resolving hardware and software issues, demonstrating strong critical thinking, problem-solving and analytical skills.

•     Provided hands-on technical support to end-users, effectively addressing queries, resolving technical problems, and consistently ensuring high levels of customer satisfaction.

•     Produced detailed records of technical issues encountered, resolutions applied, and services performed, ensuring compliance with defined SLAs while utilizing strong organizational skills and attention to detail to exceed KPIs.

•     Actively engaged in continuous learning to stay updated about innovations and applied best practices to daily workflow.

Repair and Maintenance Technician | Smart Payment Terminals                                       Aug 2018 – Aug 2021

•     Successfully diagnosed and resolved hardware and software issues, demonstrating expertise in incident response.

•     Created comprehensive diagnostic reports that effectively communicated symptoms and potential causes of issues.

•     Ensured data integrity by effectively managing SIBS cryptographic communication keys.

•     Performed final quality checks on all repaired terminals, ensuring adherence to specified standards and specifications.

**UBER & BOLT                                                                                         **Lisbon, Portugal

TVDE Driver (Second Job – Evenings and Weekends)                        Nov 2021 – Jan 2023

•     Maintained excellent customer satisfaction ratings (4.96/5) over 2000+ trips, showcasing my dedication to clients.

CERTIFICATIONS

CC (Certified in Cybersecurity) – ISC2

AZ-900 (Azure Fundamentals) – Microsoft

SC-900 (Security, Compliance, and Identity Fundamentals) – Microsoft

FCF (Fortinet Certified Fundamentals Cybersecurity) – Fortinet

Word Expert, Excel Expert, PowerPoint Associate – Microsoft

TOOLS, TECHNOLOGIES & FRAMEWORKS

Tools/Technologies: Azure, AWS, TeamMate+, Splunk, Wireshark, ZAP, BurpSuite, DirBuster, Qualys, OpenVAS, Packet Tracer, PfSense, Snort, Fail2Ban, OSSEC, DiskPart, VeraCrypt, FlowCrypt, Microsoft PowerPoint, Microsoft Excel, Microsoft Word, Windows, Linux, SQL Server, MySQL, C, Ruby, JavaScript, HTML, CSS, PHP, Python.

Frameworks: ISO/IEC 27001, ISO/IEC 27002, DORA, NIST, CSA Cloud Controls Matrix, GDPR, CIS Controls, MITRE ATT&CK, OWASP Top 10.