Tiago Filipe Dias, MBA

CEO

Luxembourg, Luxembourg21 yrs 3 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Over 20 years of IT/OT cybersecurity experience.
Proven record in leading complex projects on time and budget.
Expert in bridging business needs with cybersecurity best practices.

Stackforce AI infers this person is a Cybersecurity Expert with extensive experience in risk management and technical leadership.

Contact

Skills

Core Skills

CybersecurityRisk ManagementInformation SecurityBusiness ContinuityProject ManagementBusiness DevelopmentIt AdvisoryNetwork SecuritySystem AdministrationNetwork Management

Other Skills

Technical LeadershipResearch ManagementCollaborationTrainingProcess EfficiencyService DeliverySecurity AssessmentCyber Threat IntelligenceGrid ComputingIT Service ManagementCapacity ManagementBusiness Process ManagementKey Performance IndicatorsBudget ManagementStrategy

About

FM, a leading commercial property insurer, helps clients protect their critical assets and operations from cyber threats. With over 20 years of experience in IT/OT cybersecurity, I have developed and implemented cyber risk management programs, frameworks, and standards for various industries, including critical manufacturing, oil & gas, healthcare, pharma, banking and telco. My mission is to bridge the gap between business needs and cyber best practices while delivering customer-centric solutions that enhance resilience. Proven record in leading, coaching, and guiding teams towards desired results, as well as completing complex projects on time and on budget. Passionate about continuous learning.

Experience

Fm

2 roles

Vice President, Principal Cyber Research

Promoted

Aug 2024 – Present · 1 yr 7 mos · Luxembourg

Technical responsibility over fundamental and applied cyber research activities performed globally
Strategically develop and operationalize state-of-the-art cyber laboratories to enhance the company’s ability to identify, assess and improve cyber risk
Assess and reduce industrial risk as a result of increased digitalization of infrastructure and processes
Relationship management with the world’s top cyber security scientists, researchers and renown cyber market leadership
Develop cyber threat scenarios and innovative cyber security mitigation strategies related with increasing Industrial digitalization with a focus on physical damage to OT equipment and/or stock in process
Hire, train and technically mentor research experts on emerging cyber technologies and architectures
Collaborate with Underwriting, Engineering, FM Approvals and FM Solutions in a cyber research lead capacity
Establish and manage partnerships with academic and research institutions and 3rd party vendors

CybersecurityRisk ManagementTechnical LeadershipResearch ManagementCollaboration

EMEA Cybersecurity Lead

Apr 2018 – Dec 2024 · 6 yrs 8 mos · Luxembourg

Customer-centric with executive presence at BoD/CEO/CFO/COO/CRO/CIO/CISO level with trusted cyber advisor and influence capabilities
Technical lead, knowledge and hands-on experience of industry standards, frameworks, and regulations such as ISO 27000-series, GDPR, CIS Critical Security Controls, NIST cybersecurity standards, PCI-DSS
Technical lead and hands-on experience with Operational Technology/Industrial Control Systems and associated cyber standards, frameworks such as ISA/IEC 62443, NIST SP800-82 series and NERC CIP
Collaboratively development, implementation and improvement of cyber hazards services and processes
Train cyber security, techniques and mitigation tactics to client facing roles across FM Global, at divisional level
Internal and external spokesperson of security-related concepts, to a broad range of technical and non-technical audiences with the ability to positively influence outcomes
Collaborate with Claims, Underwriting, Engineering and Business Risk Consulting business units in a cyber lead capacity

CybersecurityRisk ManagementTechnical LeadershipTrainingCollaboration

Roche / european commission

Contractor

Jun 2011 – Apr 2018 · 6 yrs 10 mos · Luxembourg

Contracting for leading global audits and advisory engagements
Advise management and drive measures towards process efficiency, effective controls, and robust information security and business continuity management practices
Information Security and Business Continuity lead
Mentoring onsite/virtual teams across the Globe (40+ skilled colleagues)
Cyber Program/Project Management
Entities: Roche and European Commission

Information SecurityBusiness ContinuityProcess Efficiency

Software ag

Professional Services Director

Dec 2008 – Nov 2011 · 2 yrs 11 mos · Lisbon, Portugal

webMethods BPM & SOA business driven
Accountable for Portugal’s service delivery whilst reporting to Iberia General Manager, in Spain
Leveraged service level compliance through strategic technical leadership, team management and business development
12 projects with a total budget of 2.6M€
Directly manage 26 project team members, including 3rd party service providers

Service DeliveryProject ManagementBusiness Development

Deloitte

Enterprise Risk Services - Security & Privacy

Jan 2007 – Dec 2008 · 1 yr 11 mos · Lisbon, Portugal

Managing IT Advisory and IT Assurance services such as IT Processes Assessment, Data analysis, Identity and Access Management, COBIT, ITIL reviews, IT Risk Management, GRC Security Audit, design of access control models
Manage and conduct security assessments, posture assessments and penetration tests
Designing and implementing incident management and threat management programs which includes maintaining program documentation (e.g., incident response plan, standard operating procedures)
Managing team and delivery of security initiatives
Advising senior leadership with critical security issues and risk-reduction mitigation strategies
Project team management and coaching

IT AdvisorySecurity AssessmentRisk Management

Whatevernet sgps / trusted systems s.a.

Senior Security Engineer

Jan 2003 – Jan 2007 · 4 yrs · Lisbon, Portugal

System, networking administration
Main point of contact for customers for information security matters
Delivery, implementation and documentation for firewalls, network access control, network traffic protection, SIEM, business continuity, security policies, PKI infrastructure, monitoring and system automation
Review and recommend secure configuration baselines (hardening)
Penetration tests and vulnerability assessments
Cyber threat intelligence
Information security policy programs (BS 7799/ISO 27001 and NIST)

System AdministrationNetwork SecurityCyber Threat Intelligence