JAQUELINE MERLOTTO BARBOSA

Data Privacy and Controls Manager

Winter Garden, Florida, United States

About

● Controls, Data Privacy and Human Resources professional with more than 25 years’ experience in Audit, Compliance and Privacy Laws in the multinational technology industry, who has a large number of satisfactory audits achieved, a large number of Global Privacy Assessments reviewed to ensure Privacy laws implemented and in compliance. ● Knowledgeable of Human Resources and Data Privacy concepts, such as risk assessment, data privacy impact assessment and audit process. Skilled in SOX compliance, GDPR / CCPA / LGPD and Human Resources Processes (Benefits, Pension, Payroll, Recruitment, Onboarding, Offboarding, Medical Clinics). ● Automated manual process with Data Analytics – SPSS implementation. Around 40 SPSS projects implemented across Americas HR with manual task elimination, full universe validation using analytics versus sample testing, eliminating hard copy, saving a lot of work time annually.

Experience

  • HR Data Privacy Sr Manager at Citi
    Jan 2024 - Present · 2 yrs 7 mos

  • IBM (Full-time · 25 yrs 7 mos)
    • Americas, Portugal & Spain HR Business Controls Leader & Data Privacy at IBM Brasil
      Jan 2018 - Jan 2023 · 5 yrs 1 mo

      ● Executed control and audit tasks, such as proactive reviews, risk assessment and compliance within the Human Resource department of a multinational company in the technology industry, responsible for Americas, Portugal and Spain support. ● Tracked and reviewed a large number of 700 Global Privacy Assessment in OneTrust tool, to identify risks and new process to be implemented to ensure compliance with GDPR, CCPA, LGDP and other data privacy laws around the world, adequate controls in the process to handle PI/SPI data. Worked closely with Chief Privacy Office and Legal to adequate Consent Forms, Customized Privacy Notice and all other requirements for the law. Ensured DPIA (Data Privacy Impact Assessment) are in place. • Implemented successfully LGPD in Brazil for HR Process reviewing and adequate all processes to handle PI/SPI data in accordance with the new data privacy law. Up to 175 files filled for privacy assessment working with Legal, Project Office and HR teams. • Built guidance and data privacy training material and educate up to 50 HR teams in Americas, Portugal and Spain. ● Handled data protection incidents and DSR (Data Subject Rights) to attend the requirements where some ticket is opened. ● Reviewed vendor contracts in HR to ensure contracts are compliant with data protection laws and regulations. ● Global focal to Payroll Process performing up to 10 controls review in 2022 to identify risks in the process and privacy controls.

    • Americas HR Controls Leader
      Jun 2011 - Jan 2023 · 11 yrs 8 mos

      ● Managed remote employees around countries such USA, Canada, Mexico, Spain, Brazil, Argentina, and Costa Rica. ● Conducted control and audit tasks, such as proactive reviews, risk assessment and compliance within the Human Resource department of a multinational company in the technology industry, responsible for Americas. ● Automated manual process with Data Analytics – SPSS implementation. Around 40 SPSS projects implemented across Americas HR with manual task elimination ensure accuracy in the data, full universe validation using analytics versus sample testing, eliminating hard copy, saving a lot of work time annually. ● Managed, monitored and coordinated up to 250 samples tested by quarter to follow SOX requirements, including self-assessment process and quarterly management certification. ● Coordinated a campaign to deploy a series of short videos for education stakeholders on Controls main topics, shared 10 videos such Introducing HR Controls Team, Workplace Security (WPS), Business Continuity Plan (BCP), Data Privacy & Security, Process Documentation, Access Management, Audit Readiness, Vendor Management, Data Analytics – SPSS tool and Separation of Duties (SOD). ● Simplified compliance testing working with Payroll, Pension and Benefits team resulting in an elimination up to 15 Key Controls Operations (KCOs) and Key Controls Financial (KCFRs), implementing the controls in the process execution instead of samples testing. ● Performed proactive reviews to identify risks or weakness in the process that could lead the process to frauds. The review is performing in several areas covering Talent, Onboarding, Offboarding, Benefits, Pension, Payroll and Medical Clinics processes in Americas countries.

    • Finance Business Controls Advisor
      Feb 2008 - May 2011 · 3 yrs 4 mos

      - Coordiinated Scorecard and managed review controls results. - Monitored and followed SOX compliance testing results including self-assessment process. - Supported a large number of internal and external audits reviewing material to be provided to the auditors with satisfactory results. - Performed a large number of proactive reviews to identify risks or weakness in the process. - Provided consulting and advisor for Leaders and Directors in controls subjects. - Elaborated and presented results to global and regional executives.

  • Telemarketing at Unibanco
    Jan 1995 - Jul 1997 · 2 yrs 7 mos

    - Attendance in the Call Center for a large National Bank.