Anne Lise Brum Email & Phone Number

Rio De Janeiro, Brazil

Rio De Janeiro, Brasil

As an Internal Audit and Controls IT Analyst is a member of the IT Audit Global Team, executing the following activities:- Execution of IT Audits as planned by the management;- SOX 404 (IT):▫ ITGC controls tests of tools and systems as, for example, user access review (privileged, generic, and user accounts), password parameters to be per the best practices, changes management, server accesses, data warehouse, and account access granting;▫ Tests in systems as SAP platforms (SAP GRC and ECC) and not SAP platforms (ARCS, BizTalk/ISS, CyberArk, HARP, HP ALM, Legal Tracker, Service Now, Solman, Workiva, Team Spirit, Diapason, GEOS, FPW, Sara Pal Pack, CorpTax, Snowflake, Active Directory, Hyperion, MDM and Power Plan);- AACs and Key Reports: Performed assessments to cover crucial financial and IT reports and Automated Application Controls (AACs).- SOX 404 (Financial): Conducted SOX financial controls tests aiming to identify anomalies and report the results to the senior management and external audit.

- Development of KRIs and data visualizations to the business areas, as order-to-cash process and financial KPIs aiming to identify indications of fraud or anomalies;- Conduction of revision of the design and efficiency tests, to be reported to the holding and senior management, for the annual self-assessment;- Leadership and involvement in the SAP Profile Redesign Project aimed to reduce the number of SOD (Segregation of Duties) risks on ERP SAP;- Evaluation of the accesses to be granted and the modification of functions/roles in the ERP SAP system following the SOD principles aiming to reduce the number of the risks in the risks matrix;- Development of internal KPIs to the Risk and Internal Controls area;- Conduction of mapping process to identify improvement opportunities and KRIs to be developed.- Involvement in BCP (Business Continuity Plan) project;- Appliance of ACL Analytics software in data analysis activities and control automation aiming to identify anomalies.- Revision of policies and procedures;- Follow-up of action plans created according to the results of the tests during the self-assessment execution;- Risk detection, process designs, workflows, and internal controls;- Involvement in the Focus Group in the creation of solutions for the company following the findings during the GPTW survey;- Creation of controls monitoring processes governance and their standards documents to compose the KRIs documentation to the Risk and Internal Controls area of Supergasbras.

After working for 2 years in the internal audit, was invited to work in the Risks and Internal Controls area as an intern. In the Risks and Internal Controls area worked with the following activities:- Process automation using Office 365 (Power Apps and Power BI)- Review of efficiency test to the self-assessment;- Process mapping and risk identifications to support the audit process;- Development of KRIs (Key Risk Indicators) and KPIs for the business and internal control areas.

Rio De Janeiro

As an intern in the Internal Audit, performed the following activities:- Investigation of security incidents and supported the audit financial investigator;- Performed operational and IT audits, efficiency and design tests, issues detection, and involvement in the final report;- Policies and information security processes improvement;- ITGC (Information Technology General Controls) tests for IT Audits;- Process of automation using VBA/SQL scripts for data modeling connecting it to dashboards.- Automation of the follow-up process regarding audit findings creating data modeling to generate data visualizations for the senior management;- Monitoring of the data flow using the Data Loss Prevention software and reporting the security incidents to the senior management;- Project of automation creating an application using Microsoft Access/SQL to collect and registersecurity incidents aiming to generate a data visualization (Power BI) for the senior management;- Efficiency test on software aiming to find fragilities and improvement opportunities.

Rio De Janeiro

- Conducted the team during audits aiming to generate results for the board members;- Conducted efficiency and design tests in financial and operational controls;- Development of the follow-up process for action plans created based on issues detected during the performed audits.- Management of internal policies and procedures.

Rio De Janeiro

During the Production Engineering Bachelor in the Junior Enterprise Salto Consultoria, as a Quality Analyst, performed the following activities:- Conduction of operational and financial audits;- Quality and Audit workshops for new members.

Engenharia De Produção

Técnico, Building Construction Technology

Técnico, Interior Design

People Management With Emphasis On Organizational Leadership (Leadership And Coaching)

Curso Complementar, Auditoria Em Segurança Da Informação

Requisitos associados à gestão das informações e dos sistemas de informação que interessam às auditorias, desde a etapa de investigação.

Acl Analytics

O curso sobre ACL Analytics oferece habilidades avançadas em auditoria e análise de dados, abrangendo técnicas de extração, transformação.

Education record

A formação de cientista de dados é um curso que ensina habilidades essenciais para coletar, analisar e interpretar dados, usando.