Jéssica Gessoli
I turn cyber and AI risk into decisions for executive teams and boards.
For regulated and critical infrastructure organizations. Since 2008 in banking, insurance, healthcare, telecommunications and rail, bridging technology, legal, operations, audit and the executive team.
Technical risk only protects when it becomes a decision.
Examples of the translation I do between the technical report and the executive table.
| The technical team reports | The executive team needs to decide |
|---|---|
| The operational technology environment runs on unpatched systems. | How long can operations stay down, and how much should we invest to shorten that time? |
| Business units use generative AI without a model inventory. | Who is accountable if an automated decision harms a customer? |
| The controls exist, but there is no evidence they work. | Will we pass the next audit and the next regulatory inspection? |
| A critical vendor has administrative access to the environment. | If that vendor is breached, what is the loss and who is responsible? |
Working together
Three ways to work together, each with its own channel.
-
Leadership roles
Cyber risk, governance, risk and compliance, and AI governance management roles in banking, insurance, healthcare, telecommunications and critical infrastructure. Employment or advisory engagement.
For recruiters, search firms and hiring leaders. The first step is a 30-minute call.
Book a 30-minute callConnect on LinkedInFollow on InstagramResume (PDF, 1 page)
-
Advisory and projects for large organizations
Operational technology and critical infrastructure security, and cyber and AI risk governance programs in regulated operations.
For technology, risk and operations leaders. The first step is a 30-minute call.
-
Speaking and event hosting
Talks, panels and moderation on cyber risk, AI governance and digital fraud, and stage hosting at technology events. Stage host at Mind The Sec 2026.
For event organizers, associations and companies.
Areas of expertise
-
Cyber risk governance
Risks prioritized by business impact, with controls and evidence that hold up in an audit.
ISO/IEC 27001, ISO/IEC 27005 and NIST CSF
-
Artificial intelligence governance
AI used with rules, controls and clear owners, before the risk reaches the customer or the regulator.
ISO/IEC 42001 and NIST AI RMF
-
Operational technology and critical infrastructure
Security and continuity for environments that cannot stop: networks, radio links, stress testing and acceptance testing.
Integrated IT and operational technology
-
Continuity and crisis management
Tested business continuity and disaster recovery plans, and coordinated decisions when a crisis hits.
Business continuity and incident response
Experience
Experience in regulated or critical sectors. Results described without employers' confidential data.
- Critical infrastructure
- Rumo Logísticauntil 2026
Railway IT and operational technology infrastructure: stress testing, radio links and delivery of the full infrastructure, with operational continuity preserved.
- Insurance
- Porto Seguro2021 to 2025
Cyber risk and security by design, up to technical leadership. Phishing simulations, anti-fraud training and a Lean Six Sigma Green Belt project.
- Banking
- Santander Brasil
Service level management. Dynatrace Excellence Award 2019.
- Healthcare
- Unimed Campinas
Health data privacy, phishing simulations and anti-fraud training.
- Telecommunications
- CPqD
Audit of telecommunications bills and contracts, with significant financial recovery.
- Food service
- Fit Por Favor2016 to 2019
Own restaurant: digital operations, payments, metrics and customer service.
- Own company
- Zethicsince 2026
Founder. Digital risk and technology for businesses.
Recommendations
More than 50 recommendations on LinkedIn, written by leaders, peers, direct reports, clients and professors over a career in banking, insurance and telecommunications.
Education and certifications
Education
- MBA in IT Project ManagementIBMEC, 2015 to 2016
- Bachelor's degree in Information Systems
Certifications
- ISFSInformation security foundation, based on ISO/IEC 27001
- CCEPEthics and compliance
- Lean Six Sigma Green Belt
- ITIL 4 Foundation
- Scrum
Contact
Choose the channel by topic.
- Calendar
- Book a 30-minute callFirst conversation about leadership roles or advisory work
- linkedin.com/in/jessicagessoliLeadership roles
- @jessicagessoliContent in Portuguese for business owners and leaders
- jessica.gessoli@zethic.netAdvisory, speaking and other topics