Luiz Vieira

• I lead Mambu's global IT security audit and assurance function, reporting directly to the CFO and Management Board. My responsibilities include overseeing global internal audits, customer audits, and external certifications (ISO 27001, SOC 1 & 2), as well as aligning audit outcomes with enterprise risk priorities. I play a key role in supporting M&A activities and integrating security requirements into the company's business strategy and product roadmap. My efforts ensure regulatory compliance, stakeholder trust, and long-term security resilience.

• Enforced compliance measures for adherence to industry standards.

• Directed team to deliver high-quality customer service.

• Championed change initiatives within the organisation for streamlined operations.

• At AWS, I managed third-party and customer audit engagements across highly regulated industries, helping to ensure compliance with ISO 27001, SOC 2, GSMA, and other frameworks. I led initiatives that resulted in unlocking over $2.8 billion in strategic contracts by resolving critical compliance blockers. I enhanced audit operations by implementing scalable processes, streamlined evidence management, and drove customer engagement that improved satisfaction and reduced audit friction.

• Increased customer satisfaction by resolving issues.

• Completed duties to deliver on targets with accuracy and efficiency.

• As Global CISO, I led the security strategy for offices in six countries,

ensuring alignment with GDPR and other compliance standards. I

implemented a strategic roadmap addressing security across people,

cloud, business, and infrastructure domains. I also enhanced security

awareness and built operational resilience by aligning security priorities

with enterprise risk management and driving board-level reporting.

• Facilitated successful ISO 27001 certification process through rigorous

preparations.

• Navigated complex regulatory environments whilst ensuring full legal

compliance.

• Worked closely with legal team to achieve compliance with GDPR

regulations.

• Collaborated with IT team to establish robust network security measures.