Cybersecurity and AI executive
Jéssica Gessoli
I turn cyber and AI risk into decisions for executive teams and boards.
For regulated and critical infrastructure organizations. 18 years in banking, insurance, healthcare, telecommunications and rail, bridging technology, legal, operations, audit and the executive team.
Technical risk only protects when it becomes a decision.
Examples of the translation I do between the technical report and the executive table.
| The technical team reports | The executive team needs to decide |
|---|---|
| The operational technology environment runs on unpatched systems. | How long can operations stay down, and how much should we invest to shorten that time? |
| Business units use generative AI without a model inventory. | Who is accountable if an automated decision harms a customer? |
| The controls exist, but there is no evidence they work. | Will we pass the next audit and the next regulatory inspection? |
| A critical vendor has administrative access to the environment. | If that vendor is breached, what is the loss and who is responsible? |
Services
Choose the service and get in touch through the channel listed.
-
Leadership roles
Cyber risk, governance, risk and compliance, and AI governance management roles in banking, insurance, healthcare, telecommunications and critical infrastructure. Employment or advisory engagement.
For recruiters, search firms and hiring leaders. The first step is a 30-minute call.
Book a 30-minute callConnect on LinkedInFollow on InstagramResume (PDF, 1 page)
-
Advisory and projects for large organizations
Operational technology and critical infrastructure security, and cyber and AI risk governance programs in regulated operations.
For technology, risk and operations leaders. The first step is a 30-minute call.
-
Cybersecurity and AI assessment
Where a business can lose money to fraud, data leaks or unmanaged AI use, and what to fix first, in plain business language.
For business owners and boards. The first step is a 30-minute call.
-
Anti-fraud program
Teams that recognize scams, payment rules that stop fraudulent transfers, and a blameless culture for reporting.
For companies of any size.
-
AI governance, security governance, privacy and data protection
AI used with rules, controls and measured return, personal data handled with care and documentation, and answers to the security questionnaires customers send.
For boards and executive teams.
-
AI mentoring and advisory
Learn to use AI safely on your own project, with one-to-one guidance.
For professionals and business owners.
-
AI training for companies
Training teams to use AI at work with clear rules and without exposing company data.
For companies of any size.
-
Technical training
Cybersecurity and AI training for technical teams, tailored to each company's operation.
For technology, security and operations teams.
-
Speaking, panels and event hosting
Talks, panels and moderation on cyber risk, AI governance and digital fraud, and stage hosting at technology events. Stage host at Mind The Sec 2026.
For event organizers, associations and companies.
Areas of expertise
-
Cyber risk governance
Risks prioritized by business impact, with controls and evidence that hold up in an audit.
ISO/IEC 27001, ISO/IEC 27005 and NIST CSF
-
Artificial intelligence governance
AI used with rules, controls and clear owners, before the risk reaches the customer or the regulator.
ISO/IEC 42001 and NIST AI RMF
-
Operational technology and critical infrastructure
Security and continuity for environments that cannot stop: networks, radio links, stress testing and acceptance testing.
Integrated IT and operational technology
-
Continuity and crisis management
Tested business continuity and disaster recovery plans, and coordinated decisions when a crisis hits.
Business continuity and incident response
Experience
Experience in regulated or critical sectors. Results described without employers' confidential data.
- Critical infrastructure
- Rumo Logísticauntil 2026
Railway IT and operational technology infrastructure: stress testing, radio links and delivery of the full infrastructure, with operational continuity preserved.
- Insurance
- Porto Seguro2021 to 2025
Cyber risk and security by design, up to technical leadership. Phishing simulations, anti-fraud training and a Lean Six Sigma Green Belt project.
- Banking
- Santander Brasil
Service level management. Dynatrace Excellence Award 2019.
- Healthcare
- Unimed Campinas
Health data privacy, phishing simulations and anti-fraud training.
- Telecommunications
- CPqD
Audit of telecommunications bills and contracts, with significant financial recovery.
- Food service
- Fit Por Favor2016 to 2019
Own restaurant: digital operations, payments, metrics and customer service.
Publications
- Book chapter, forthcoming
- From technical risk to executive decision
Chapter in the collective book “Loneliness at Work: reflections on experiences in the professional world”, from the LabLivro imprint of LabEditora. Shows how to turn cybersecurity into a conversation that moves the business, with five questions that take a technical risk to a leadership decision. Book and chapter in Portuguese; titles translated here.
- Article, 2026
- Disarming artificial intelligence: cybersecurity, deepfakes and human dignity in the age of synthetic digital identities
Culture Digitali journal (DiCultHer, Italy), issue 18, May to September 2026. Treats deepfakes and synthetic digital identities as a risk to dignity, consent, reputation and evidence, and proposes layered governance built on NIST, the Brazilian data protection law, C2PA and the EU AI Act. Article in Portuguese, with an editorial introduction by Carmine Marinucci and abstracts in Italian and English; title translated here.
- Conference, 2013
- Smart Grid: Miscellaneous Information Technologies and the Challenges of Their Implementation
With Fuad Gattaz Sobrinho. Idea presentation at the international conference SDPS 2013, held by the Society for Design and Process Science in Campinas, Brazil. Proceedings ISSN 1090-9389, pages 267 to 271. Published under the name Jéssica Caroline da Silva.
Recommendations
More than 50 recommendations on LinkedIn, written by leaders, peers, direct reports, clients and professors over a career in banking, insurance and telecommunications.
Education and certifications
Education
- MBA in IT Project ManagementIBMEC, 2015 to 2016
- Bachelor's degree in Information Systems
Certifications
- ISFSInformation security foundation, based on ISO/IEC 27001
- CCEPEthics and compliance
- Lean Six Sigma Green Belt
- ITIL 4 Foundation
- Scrum
Contact
Choose the channel by topic.
- Calendar
- Book a 30-minute callFirst conversation about leadership roles or advisory work
- linkedin.com/in/jessicagessoliLeadership roles
- @jessicagessoliContent in Portuguese for business owners and leaders
- jessica.gessoli@zethic.netAdvisory, speaking and other topics