Mayara F Santos Email & Phone Number

• In summary, responsibilities include:
• getting processes and procedures compliant to security requirements.
• performing risk assessment, internal controls, follow-up meetings;
• managing security certifications (ISO27001, SOC2,...);
• audits;
• providing counseling in regards to security compliance.

• As member of the GRC team I was responsible for assessing the processes and controls regarding IT Security and provide guidance on compliance. My activities inclueded but were not limited to:
• Assessing and auditing IT processes and controls based on CIS framework.
• Presenting the results of the assessments to the clients and the Lead Team.
• Monthly follow-up meetings.
• Prioritizing critical controls and supporting the implementation of new ones arising from security incidents.
• Perfoming audit tests in order to verify if the controls are compliant to policies and procedures.

Poços De Caldas

As a Compliance Tester I performed audit assessment based on Alcoa ASAT (Alcoa Self-Assessment Tool) methodology for IT protocols for Alcoa entities across the globe. Focus in SOX requirements and COBIT best practices. My activities included but were not limited to: - Performing tests to verify controls and processes are compliant with the company's.

Master Of Business Administration - Mba, Computer/Information Technology Administration And Management

Focus on Information Security Management

Environmental Engineering / Engenharia Ambiental

Environmental Engineering

Activities and Societies: Exchange Program - 2015 / Intercâmbio estudantil (Programa Ciências sem Fronteiras)