Ricardo Lewin Lewinsohn

Leading risk management, business continuity, disaster recovery, and broader GRC initiatives at an industrial technology company that combines software, hardware, IoT, and AI for maintenance and reliability operations.

• Established an official GRC intake process and launched an internal help center.
• Automated security questionnaire workflows to improve consistency and response efficiency.
• Conducted risk assessments across business functions and created the enterprise risk management program.
• Improved governance documentation and implemented workflow automations.
• Developed business continuity and disaster recovery practices alongside the broader compliance program.

Progressed from IT Operations Intern to Information Security Analyst III, moving from scalable IT operations and endpoint governance into ownership of GRC programs, risk management, and audit readiness.

• Information Security Analyst IIIOct 2024 — Nov 2025
• Information Security Analyst IIApr 2023 — Oct 2024
• Information Security Analyst IJul 2022 — Apr 2023
• IT Operations Analyst IIOct 2021 — Jul 2022
• IT Operations InternDec 2020 — Oct 2021

• Delivered full PCI DSS 4.0.1 compliance, implementing newly applicable requirements ahead of schedule.
• Led and matured GRC programs across PCI DSS, SOC 2, and ISO frameworks.
• Optimized AuditBoard workflows and control structures, reducing audit preparation time by 20%.
• Built Python and workflow automations for compliance operations, evidence collection, and control execution.
• Reduced tooling expenses by BRL 150,000 per year without impacting compliance operations.
• Implemented endpoint and identity controls across 250+ macOS devices and established the first centralized IT asset inventory.