Open to opportunities

MARESSA JURICIC

@maressajuricic

Cybersecurity & GRC leader building LGPD-aligned privacy programs, cyber risk governance, and audit-ready security controls for enterprise clients.

Brazil

Message

What I'm looking for

I’m looking to lead cybersecurity and GRC strategy where I can govern cyber risk and privacy programs, run audit-ready controls, and partner directly with C-level stakeholders on portfolio decisions and regulatory compliance.

I lead cybersecurity and GRC strategy at Santander Brasil, running cyber risk management, audits, compliance, governance, and executive reporting. I structure and govern the cybersecurity project portfolio with prioritization, financial management, and execution tracking, and I define risk appetite, KPIs/KRIs, and operating model roles to strengthen governance maturity.

Before that, I built PwC Brasil’s Privacy and Data Protection practice—setting strategy and market positioning, leading multidisciplinary teams, and engaging executives to design privacy, cybersecurity, and GRC roadmaps. I also managed large-scale privacy and security programs, including regulatory compliance and cyber risk management.

Earlier in my career, I delivered IT audits and information security programs across frameworks like NIST, ISO 27001/27002, COBIT, and ISO 27005, including SOX (ITGC), access control reviews, business continuity planning, and security policy/process development. Across roles, I’ve focused on turning governance and audit requirements into practical controls and measurable executive visibility.

Experience

Work history, roles, and key accomplishments

Current

Conselheira

Current

Rede Líderes

Sep 2025 - Present (11 months)

Serves as an advisor at REDE Líderes, a community that connects leaders to discover and validate technological solutions with practical applications and peer support.

Current

Head of Cybersecurity & GRC

Current

Santander Brasil

Apr 2025 - Present (1 year 4 months)

Leads cybersecurity and GRC strategy, including cyber risk management, audits, compliance, governance, and strategic metrics. Structures and governs the cybersecurity project portfolio with financial management and execution tracking.

Cybersecurity GRC Risk Management Audit Compliance Governance Project Portfolio Management KPIs KRIs Executive Reporting

Cybersecurity and Privacy Partner

PwC Brasil

Apr 2022 - Apr 2025 (3 years)

Led the Privacy and Data Protection practice, including strategy definition, service portfolio, and market positioning. Managed multidisciplinary teams and engaged in business development and strategic client management.

Privacy Data Protection Cybersecurity GRC Regulatory Compliance Risk Management Business Development Client Management

Privacy & Cybersecurity Director

PwC Brasil

Jul 2019 - Apr 2022 (2 years 9 months)

Led and expanded the Privacy and Data Protection consulting practice, managing a team of over 50 professionals. Delivered regulatory compliance programs, risk assessments, and designed privacy frameworks.

Privacy Data Protection Cybersecurity Compliance LGPD Risk Assessment Team Management

Council Member

WOMCY - LATAM Women in Cybersecurity

Feb 2020 - Jan 2022 (1 year 11 months)

Served as a council member for a Latin American women in cybersecurity organization.

Cybersecurity & Privacy Senior Manager

PwC Brasil

Jul 2014 - Feb 2020 (5 years 7 months)

Managed and delivered projects in cybersecurity, IT governance, business continuity, and privacy. Executed audits, maturity assessments, and implemented frameworks such as NIST, ISO, and COBIT.

Cybersecurity IT Governance Business Continuity Privacy Audit NIST ISO COBIT

Security Manager

Ernst & Young

Sep 2012 - Jun 2014 (1 year 9 months)

Managed and delivered cybersecurity projects including IT audits, governance, business continuity, and risk assessments. Executed information security maturity assessments based on ISO/IEC 27001/27002, COBIT, and NIST.

Cybersecurity IT Audit Governance Business Continuity Risk Assessment ISO 27001 COBIT NIST

Security Senior Consultant

Ernst & Young

Nov 2007 - Sep 2012 (4 years 10 months)

Acted as a consultant and leader of information security projects, including development and evaluation of security policies and procedures. Conducted SOX audits, ITGC audits, and risk assessments.

SOX Audit ITGC Risk Assessment Business Continuity Forensic Analysis SQL

Security Consultant

PwC

Jul 2006 - Oct 2007 (1 year 3 months)

Acted as an assistant in information security projects, including development and evaluation of security policies and procedures based on good market practices.

Security Policies Procédures

Trainee - Segurança da Informação

PwC

Jul 2005 - Jul 2006 (1 year)

Acted as an assistant in information security projects, including development and evaluation of security policies and procedures based on good market practices.

Security Policies Procédures

Estagiária - Análise de Dados

Vidalink

Feb 2005 - Jun 2005 (4 months)

Responsible for systems programming (Delphi, SQL Server and SQL language) for database development and integration. Developed and maintained tables and procedures in database and generated report layouts using Crystal Reports.

Delphi SQL Server SQL Crystal Reports

Education

Degrees, certifications, and relevant coursework

IESE Business School

Gestão Estratégica de Resultados, Administração e Negócios

2025 - 2025

Completed a program in Gestão Estratégica de Resultados in September 2025.

Fundação Dom Cabral

Programa Digital Leadership, Tecnologia da Informação

2023 - 2023

Completed a program in Digital Leadership from April to September 2023.

Tongji University

Master of Business Administration, Business and economy

2019 - 2019

Pursued a Master of Business Administration with a focus on Business and economy in 2019.

FIA - Fundação Instituto de Administração

MBA Executivo Internacional, Administração e Negócios

2018 - 2019

Completed an Executive MBA International program in Administração e Negócios from 2018 to 2019.

Vanderbilt University

FIA Executive MBA - International Residency, Innovation Management, Decision Making, Operation Management and Operation Excellence

2018 - 2018

Participated in an FIA Executive MBA International Residency focusing on Innovation Management, Decision Making, Operation Management, and Operation Excellence in 2018.