Summary
Overview
Work History
Education
Skills
Languages
Professional References
Timeline
Generic
Conrado Teshima

Conrado Teshima

Christie's Beach,South Australia

Summary

GRC Consultant with over 10 years of experience across banking, healthcare, pharmaceuticals, telecommunications, and consulting. Skilled in risk management, policy development, compliance auditing, and privacy impact assessments aligned with ISO 27001, ISO 27701, ISO9001, ISO31000, NIST, GDPR, LGPD and Australian AESCSF and APPs. Adept at developing practical compliance programs and leading stakeholder training to build a culture of integrity. Experienced in communication, problem-solving, and integrating governance strategies seamlessly into business operations.

Overview

11
11
years of professional experience

Work History

Privacy and GRC Consultant

Synergy Compliance
, South Australia - Australia
03.2023 - Current
  • Develop and implement compliance programs tailored to clients’ needs, referencing AESCSF, ISO 27001, ISO 27701, ISO9001, NIST, ISO 31000 frameworks and Australian Privacy Act (APPs).
  • Conduct gap analysis and create policies and procedures to address privacy and security requirements.
  • Perform risk assessments and PII data mapping to identify compliance gaps and privacy risks.
  • Deliver internal audits and prepare compliance reports for stakeholders.
  • Advise clients on information security and privacy improvements in response to evolving regulatory obligations.

Compliance Consultant

AML Cloud
, South Australia - Australia
02.2023 - 07.2023
  • Volunteer - providing consulting services as a volunteer.Advised Agile development teams on KYC, PEP, and AML regulatory requirements.
  • Provided subject matter expertise for compliance product design and policy development.
  • Supported risk assessments and contributed to drafting compliance documentation.

Compliance Analyst

Johnson & Johnson
, North And South America
08.2021 - 07.2022
  • Conducted background checks and contract reviews for third parties across the Americas, in alignment with FCPA, GDPR, and LGPD requirements.
  • Developed and maintained Tableau and Power BI compliance dashboards to monitor KPIs and performance metrics.
  • Performed incentive analyses to ensure compliance with policies and appropriate incentive allocation.
  • Collaborated with cross-functional teams and local country stakeholders to implement compliance programs and remediate gaps.
  • Trained third parties on pharmaceutical and medical compliance requirements.
  • Identified improvements to policies and controls, supporting thecontinuous enhancement of compliance processes

Governance & Compliance Analyst

A.C. Camargo Cancer Center
, Sao Paulo - Brazil
07.2019 - 04.2021
  • Developed, published, trained, and reviewed compliance policies, focusing on anti-corruption, privacy, and AML best practices.
  • Conducted investigations into complaints and whistleblowing reports, preparing findings for the Conduct Committee.
  • Analysed the impact of policies on operations and recommended improvements to ensure compliance with ANVISA, GDPR, and LGPD requirements.
  • Advised senior management on compliance and regulatory obligations, including legislation, and best practices changes.
  • Monitored regulatory developments and coordinated responses to emerging compliance risks.

Compliance Analyst

Qui! Card Soluções de Pagamento S.A.
, Sao Paulo - Brazil
02.2016 - 06.2019
  • Developed and published compliance policies, manuals, and procedures to meet BACEN, AML/CTF, PCI-DSS, and FCPA requirements.
  • Conducted due diligence, KYC, and KYE background checks, and performed financial risk analyses of transactions.
  • Created, reviewed, and managed contracts to ensure compliance with regulatory standards.
  • Monitored AML risks and supported the implementation of Mastercard and COSO control requirements.
  • Delivered compliance training on policies, anti-bribery, and sanctions to internal teams.
  • Reviewed existing controls to identify gaps and drive continuous improvement.
  • Advised senior management on regulatory changes and compliance obligations.

Legal Assistant

Grupo Bandeirantes de Comunicacao
, Sao Paulo - Brazil
02.2014 - 12.2015
  • Maintained and updated corporate books, governance records, and regulatory documentation.
  • Prepared and reviewed contracts to ensure compliance with ANATEL regulations and Brazilian corporate law.
  • Managed share and debenture transactions, and related filings.
  • Interpreted regulatory requirements, and assessed impacts on operations.
  • Liaised with regulatory bodies and external stakeholders on compliance matters.

Education

Postgraduate studies - Compliance & Corporate Integrity

PUC - Pontifica Universidade Catolica
Minas Gerais, Brazil
01.2022

Bachelor Degree - Law

UNIP - Universidade Paulista
Sao Paulo, Brazil
01.2014

Certification - Cybersecurity Professional

Google
United States
08-2023

Certification - CIPM

IAPP
Brussels, Belgium
05-2025

Skills

  • Compliance program development and implementation
  • Privacy Impact Assessments & PII Data Mapping
  • Cybersecurity Awareness & Governance
  • Risk Assessment & Mitigation
  • Regulatory Interpretation & Legal Opinion Drafting
  • Third-Party Due Diligence & Monitoring
  • Stakeholder Training & Engagement
  • Dashboarding & KPI Reporting

Languages

  • Portuguese, mother-tongue
  • English, Advanced
  • Spanish, Basic

Professional References

  • Sergio Pinto, Senior Director Compliance, Johnson & Johnson, https://www.linkedin.com/in/sergioapinto/
  • Filipe Donadelo Balbi, Governance & Compliance Manager, A. C. Camargo Cancer Center, filipe.balbi@accamargo.org.br, https://www.linkedin.com/in/filipebalbi/
  • Daniel Monteiro Pimentel, Vice President, Head of the Legal Department & Compliance, Qui! Card Soluções de Pagamentos S.A., https://www.linkedin.com/in/danielmpimentel/
  • Marco Aurelio Souza, Director Depto. Legal, Grupo Bandeirantes de Comunicação S.A., https://www.linkedin.com/in/maureliosouza/

Timeline

Privacy and GRC Consultant

Synergy Compliance
03.2023 - Current

Compliance Consultant

AML Cloud
02.2023 - 07.2023

Compliance Analyst

Johnson & Johnson
08.2021 - 07.2022

Governance & Compliance Analyst

A.C. Camargo Cancer Center
07.2019 - 04.2021

Compliance Analyst

Qui! Card Soluções de Pagamento S.A.
02.2016 - 06.2019

Legal Assistant

Grupo Bandeirantes de Comunicacao
02.2014 - 12.2015

Postgraduate studies - Compliance & Corporate Integrity

PUC - Pontifica Universidade Catolica

Bachelor Degree - Law

UNIP - Universidade Paulista

Certification - Cybersecurity Professional

Google

Certification - CIPM

IAPP
Conrado Teshima