Implementation of the Global program (Hotmart, Teachable and eNotas) LGPD; CCPA and GDPR • Privacy policy management • Maturity assessment considering the ISO 27001 and 27701 standard • Data subject request (DSR) • Process management (RoPA, LIA, DPIA) • Support to the development team in implementing the privacy tool • Cookie management • Incident management (Report adequacy, risk analysis and post-incident controls) based on NIST

Implementation of Grupo Globo's privacy program; • Management of the record of personal activities (RoPA); • Third-party Due Diligence to assess privacy risks; • Preparation of Data Protection Impact Assessment (DPIA) reports; • Development of privacy policies and terms of use; • Application of Privacy by Design concepts; • Monitoring and management of the privacy office's performance and metrics (KPIs); • Implementation and management of the privacy management tool - Onetrust (Assessment automation/ Data mapping / Vendor risk management); • Privacy training and consultancy support for internal areas and joint ventures of Grupo Globo; • Compliance with international legislation (GDPR and CCPA)

Main activities in projects in a wide range of sectors, focusing on: • LGPD and GDPR diagnostic and implementation projects; • Information security governance (ITIL, COSO, ISO 2700, ISO 27002. ISO 31000); • Threat Intelligence; • Access management; • Governance Risk and Compliance.

• Responsible for creating performance indicators (KPIs) for service lines; • Extraction and maintenance of reports from operating and legacy systems; • Control of supplier payment flow via SAP SRM; • Support in the unification of global SAP (British American Tobacco); • Production of newsletter with deliveries from the area for the Latin American cluster.