d
douetts

Michel D

@douetts

Technology Risk GRC Specialist

Brasil
Português, Inglês
Algumas informações são exibidas no idioma inglês.
Sobre mim
Technology risk and GRC specialist with 13 years across Big 4 audit, payments and healthcare. At PwC I audited IT controls on 50+ engagements; today I run the ISO 27001, ISO 27701 and PCI DSS certification programme of a payments company; before that I spent 6 years leading privacy and security risk at a large hospital group. I help companies get audit-ready for ISO 27001, SOC 2, PCI DSS, GDPR, CCPA and HIPAA, with documents written for your business, not generic templates.... Saiba mais

Habilidades

d
douetts
Michel D
offline • 
Tempo médio de resposta: 1 hora

Conheça meus serviços

Negócios
I will write a gdpr and ccpa compliant privacy policy for your website or app
A partir deUS$ 30 /projetoMais detalhes
Certificação de cibersegurança e TI
I will prepare a hipaa security risk analysis and policies for your healthtech
A partir deUS$ 150 /projetoMais detalhes

Portfólio

Experiência profissional

ConectCar

Technology Risk Specialist

ConectCar • Período integral

May 2026 - Present • 5 mos

Own the ISO 27001, ISO 27701 and PCI DSS certification programme of a payments company. Secured ISO 27001 recertification with no major non-conformities. Introduced Big 4 process walkthrough testing to map critical processes and control points end to end. Built the business continuity capability from zero (BIA and continuity programme). Run risk assessments and control testing under ISO 31000, NIST CSF and COBIT, and report to the Risk Committee.

Einstein

Privacy & Information Security Risk Specialist

Einstein • Período integral

Feb 2020 - Mar 2026 • 6 yrs 1 mo

Built and led the LGPD compliance programme from the ground up for one of the largest private hospital groups in Latin America (100+ systems, 10,000+ employees), and reviewed and maintained its public privacy policy. Ran risk assessments across the technology estate; the remediation plans I recommended cut security incidents by around 35%. Designed key risk indicators and reported risk directly to the Board. Managed control gap analyses and remediation in RSA Archer and OneTrust. Member of the Privacy Committee.

PwC

Senior Risk & Internal Controls Analyst

PwC • Período integral

Mar 2013 - Feb 2020 • 6 yrs 11 mos

Audited IT general controls on 50+ client engagements across financial services, telecoms, energy, pharma and retail. Supported SOC reporting engagements, designed control matrices under COSO, tracked remediation to closure and presented findings to client management. Progressed from trainee to senior over 7 years.