A professional dedicated to promoting excellence and innovation at the convergence of technology, auditing, risk management, and internal controls. As a specialist in GRC (Governance, Risk, and Compliance), I serve as the Internal Controls Manager at Efí, a payment institution that automates and simplifies collections. I lead the implementation and maintenance of robust control systems, applying methodologies such as the COSO framework.Beyond managerial responsibilities, I am committed to disseminating best practices in corporate governance and internal control across the industry. I am a guest lecturer in the MBA program at Fundace FEARP/USP, a speaker at national and international events, and an author of technical articles, sharing knowledge and strengthening the industry's best practices. To broaden my global perspective and enhance my communication skills, I participated in an exchange program in Europe to study English.At Ernst & Young (EY), as an auditor and consultant, I served companies across various sectors such as financial institutions, automotive, mining, telecommunications, and healthcare. I worked with major clients like Caixa Econômica Federal (CEF), Banco de Brasília (BRB), FIAT, Jeep, Unimed, Oi, Algar Telecom, and AngloGold Ashanti, adapting strategies to meet each organization's specific needs.My competencies include:• Auditing: IT General Controls (ITGC) Audits, Internal Auditing, Control Testing, Walkthroughs, Risk Matrix.• Information Security and Cybersecurity: Security Policies, Data Protection and Privacy, Cyber Risk, ISO 27001, 27002, 27005, 27701, 29100, NIST CSF, OWASP, MITRE ATT&CK, PCI DSS, CIS Controls.• Operational and IT Risk Management: Corporate Risk Management, Vulnerability Assessment and Mitigation, COSO ICIF, COSO ERM, ISO 31000.• Business Continuity: Business Impact Analysis (BIA), Incident Response, Operational Continuity, ISO 22301, 22313.• Governance, Risk, and Compliance (GRC): Governance Frameworks, Internal Controls, Regulatory Compliance, Internal Policies.• Processes: Process Mapping and Optimization, Flowcharts.Visit my website tiagosouza.com for content on auditing, risk management, controls, and cybersecurity. I am open to connections and exchanging ideas on cybersecurity, internal controls, auditing, governance, risk, and compliance.