Open to opportunities

Bruno Vieira

@brunovieira1

Message

Data protection and information security auditor specializing in LGPD/GDPR compliance.

Brazil

Message

What I'm looking for

I seek a role where I can lead privacy and security compliance, strengthen controls, and drive LGPD/GDPR programs while collaborating cross-functionally and mentoring teams.

I am a data protection and information security professional with broad experience auditing ISMS controls, implementing LGPD/GDPR compliance programs, and managing access, SoD and security processes across large organizations. I have led process mapping, internal control reviews, IT audits and remediation projects that reduced risk and aligned controls with business objectives.

My background includes roles as Information Security Auditor, Compliance Coordinator/DPO and IT Auditor where I produced compliance reports for senior management, trained staff on security and privacy, created policies and access matrices, and used standards such as ISO 27001 and FISMA to evaluate and strengthen controls.

Experience

Work history, roles, and key accomplishments

Current

Information Security Auditor

Current

MTP/PWC

Feb 2024 - Present (1 year 8 months)

Conduct audits of information security controls to verify ISO 27001 compliance, assess ISMS effectiveness, identify vulnerabilities, and deliver compliance reports with remediation recommendations to senior management.

ISO 27001 ISMS IT Audit Vulnerability Assessment Audit Reporting FISMA)Information Security Cross Functional Collaboration FISMA

Compliance Coordinator and DPO

Profarma Group

Nov 2022 - Feb 2024 (1 year 3 months)

Managed Grupo Profarma's LGPD compliance program, authored privacy policies, oversaw data mapping and discovery, handled data subject requests, and delivered compliance and IT security training.

Data Protection Policy Writing Data Mapping Data Subject Requests Training Delivery Data Security Compliance Monitoring LGPD

IT Senior Auditor

Grupo Profarma

Jul 2018 - Jan 2020 (1 year 6 months)

Managed access control and SoD remediation, audited IT controls across SAP and peripheral systems, analyzed fraud via DLP, and produced managerial reports on access and security incidents.

Access Control Fraud Analysis Reporting Identity Management

Senior IT Auditor

MAPIN Consult

Apr 2017 - Jun 2017 (2 months)

Performed logical access reviews, change and continuity management tests, password/security assessments, and on-site physical security testing of servers and IT assets.

Logical Access Change Management Business Continuity Password Testing Physical Security IT Audit Asset Inventory

ERP Risk Consultant

Jul 2013 - Mar 2017 (3 years 8 months)

Created and maintained client risk matrices, diagnosed SoD in ERP systems (SAP, Oracle, TOTVS), designed remediation plans and compensatory controls, and presented results to senior management.

SAP Oracle TOTVS Risk Remediation Plans Compensating Controls

ERP Junior Analyst

TOTVS

Jul 2011 - Mar 2012 (8 months)

Installed and maintained TOTVS ERP environments, managed backups/restores across environments, and administered access profiles with focus on segregation of duties and critical access control.

TOTVS Backup Access Management

Data Analysis Intern

Comprafácil

Nov 2010 - Apr 2011 (5 months)

Performed database analysis and maintenance, prepared operational and managerial reports, and generated databases and reports for email marketing campaigns.