Kleber Braga, CIPM

Atuação em projetos com foco em Gestão de Riscos, Segurança da Informação, Privacidade e Proteção de Dados Pessoais, Auditoria e Compliance.

Managed the Privacy Office to ensure compliance with the LGPD (Brazilian General Data Protection Law). Responsibilities included: - Developing and implementing data protection policies and procedures. - Providing guidance and training on LGPD requirements. - Managing data breach response and incident management. - Serving as the primary point of contact for data protection matters. - Leading and coordinating the Information Security and Privacy Committee, establishing its agenda, facilitating discussions, and driving key decisions.

- Served as Data Protection Officer for the RaiaDrogasil , overseeing all aspects of data protection strategy and implementation. - Established and managed the Privacy Office, ensuring compliance with the LGPD (Brazilian General Data Protection Law) through the development and implementation of policies, procedures, and training programs. - Oversaw information security governance, contributing to the organization's overall security posture and mitigating potential risks.

- Led information security governance and managed a team of coordinators, consultants, and analysts. - Developed and implemented security guidelines, policies, and procedures. - Managed security awareness training, risk assessments, vulnerability management, data breach prevention, and SAP security. - Ensured compliance with security standards (ISO 27000, PCI-DSS, NIST) and responded to audits. - Supported corporate investigations.

Oversaw IT and Information Security Internal Audit, coordinating the audit team to assess the technological environment, system controls, and related processes. Key responsibilities included: - Conducting risk-based audits of IT systems and infrastructure. - Evaluating the design and effectiveness of IT controls. - Identifying and reporting on security vulnerabilities and compliance gaps. - Managing the audit process from planning to reporting and follow-up.

Led Internal Audit, Corporate Risk Management, and Compliance functions, reporting directly to the CEO and the Audit and Risk Committee. Responsibilities included: - Managing and executing internal audits of corporate processes to identify risks and improve operational efficiency. - Establishing, implementing, and managing the Corporate Risk Management process, including risk identification, assessment, and mitigation strategies. - Developing, implementing, and managing the Compliance program, ensuring adherence to regulatory requirements and ethical standards. - Restructuring and managing the Whistleblower Hotline/Channel, ensuring confidentiality and effective investigation of reported concerns. - Coordinating the Ethics Committee, promoting ethical conduct and decision-making within the organization.

- Conducted enterprise and project risk assessments, identifying potential threats and vulnerabilities to the organization. - Implemented an operational loss data collection process to ensure compliance with Brazilian and European regulatory requirements. - Monitored compliance with the company's risk policies and controls, ensuring adherence and effectiveness.

- Provided management and leadership for supervisory audits of Investment Advisor activities, ensuring compliance with market regulations. - Led the investigation and resolution of complaints regarding Investment Advisor professional conduct, upholding ethical standards and protecting investors. - Represented ANCORD in sectorial committees, contributing to industry discussions and regulatory development.

- Led and managed corporate risk assessment projects, encompassing identification, analysis, and mitigation of potential risks. - Addressed regulatory demands related to risk management, ensuring compliance and minimizing potential penalties.

Conducted audits of business processes, corporate systems, and IT environments at Brokerage Firms participating in the Stock Exchange markets (PQO - Operational Qualification Program), utilizing a risk-based audit approach. Responsibilities included: - Planning and executing risk-based audits of brokerage firm operations, systems, and controls. - Evaluating the effectiveness of internal controls and identifying areas for improvement. - Assessing compliance with regulatory requirements and exchange rules (PQO). - Documenting audit findings and reporting results to management.

Conducted IT process and application system audits using a risk-based audit approach, supported by the CobiT framework for maturity level assessment and key control testing for SOX controls. Responsibilities included: - Planning and executing risk-based audits of IT processes and application systems. - Evaluating the effectiveness of IT controls, identifying vulnerabilities, and recommending improvements. - Utilizing the CobiT framework for maturity level assessments and key control testing for SOX compliance. - Documenting audit findings and reporting results to management.

Delivered and coordinated IT audit and information security consulting projects for national and international clients in the financial, industrial, and service sectors. Responsibilities included: - Leading the delivery of IT audit and information security consulting engagements. - Coordinating project teams and managing client relationships. - Conducting IT audits, risk assessments, and security assessments. - Developing and implementing IT security policies, procedures, and controls. - Providing advisory services on IT governance, risk management, and compliance.