Ricardo Sanches

Responsible for defining and implementing the data governance and architecture strategy, ensuring corporate alignment and regulatory compliance. Led the corporate program for the deployment of an integrated data platform, connecting all business units and driving operational efficiency. Managed and inspired a team of 100+ professionals across Product, Technology, and Operations, fostering high performance and cross-functional collaboration. Oversaw the strategic management of the division’s budget, ensuring resource optimization and return on investment. Directed Artificial Intelligence–driven projects focused on process automation and enhancing user experience.

• Leading and Conducting Internal Audits - Mapping processes, controls and risks pertaining the business; - Testing controls effectiveness and design; - Development of narratives; - Recommendation of action plans; - Proficient on the TeamMate audit tool; - Report writing and presentation to top management; - Coordinating the audit issues follow-up process with global audit team (US). - Compliance audits: ISO 27001, SOX, PCI DSS. • Audited processes: - Information Security: Policies and procedures, Security Assessment and Testing, Identity and Access Management, Communications and Network Security, Security Operations. - Information and Technology: Asset Management, Change Management, Incident and Problem Management. - Other processes: Human Resources and Payroll, Call Center, Finance and Accounting.

• Internal and External Audits - Testing controls effectiveness and design - Development of narratives - Preparation of audit reports - Recommendation of action plans - proficient in AS2 and ACL tools • Implementation of IT Key Risk Indicators (KRIs) - Interviewing IT managers; - Usage of COBIT and ITIL; - Gathering data and defining indicators; - Design and implementation of indicators maintenance methodology; - Development of dashboards for executive management; - Adjusting indicators thresholds to the company's risk appetite. • Implementation of Business Continuity Management Systems (BCMS) based on ISO 22301: 2012 - Business Impact Analysis (BIA) and risk assessment (RIA); - Development of continuity strategies; - Development of Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP); - DRP and BCP tests coordination and auditing.

.Net (C#) system developer and project support.