Tiago Brachini
Global IT Audit Specialist | Bragança Paulista, SP, Brazil (UTC-3)
IT auditor with 10+ years across Big Four (PwC) and three publicly listed fintechs (Nubank, MercadoLibre, StoneCo). Specialized in IT general and application controls (ITGC/ITAC), SOX/ICFR, SDLC governance and cloud security (AWS, GCP). I build audit data analytics and AI tooling, from SQL, Python and Scala to open-source multi-agent audit automation with human review at each stage. I map controls and plan audit scope with the Secure Controls Framework (SCF) metaframework, and use AI for data visualization and web publishing.
Experience
- Global IT Audit Specialist, Nubank (NYSE: NU), Sep 2025 – present
- IT Internal Auditor, Nubank, Mar 2023 – Sep 2025
- IT Internal Auditor, MercadoLibre (NASDAQ: MELI), Nov 2021 – Mar 2023
- IT Internal Auditor, StoneCo (NASDAQ: STNE), Feb 2021 – Nov 2021
- Risk Assurance, PwC Brazil, Jul 2015 – Feb 2021: Senior Associate (Jul 2018), Experienced Associate (Jul 2017), Associate (Jul 2016), Trainee (Jul 2015)
Open-source projects (personal)
- GRC Audit Swarm: multi-agent audit platform (Python, CrewAI) across Planning, Fieldwork and Reporting, with QA agents that reject and retry, human approval between phases, automated, read-only AWS evidence collection (boto3), a SHA-256-hashed evidence vault, AWS account-ID redaction, and OSCAL export.
- SCF Auto-Crosswalker: suggests Secure Controls Framework control IDs for IT policies, AWS Security Hub findings and audit scopes, for human review, and checks a control list against frameworks such as SOC 2 per requirement (gap analysis, no language model). CSV and OSCAL export; CI with ruff and bandit.
Education
- Tecnólogo (Brazilian higher-education undergraduate technology degree) in IT Management, FATEC Bragança Paulista, 2012
- Science Without Borders exchange program, Computer Science, Trinity College Dublin, 2013–2014
Contact
tvobrachini@gmail.com | LinkedIn | GitHub | CV: English (PDF) | Português (PDF)