André Kenji Maebara
Senior Consultant | Compliance, Audit, Risk Management and Governance | ISO 37301 · ISO 37001 · ISO 31000 · ISO 27001 · ISO 9001
About the specialist
Senior executive with 30 years of professional experience in internal and external audit, compliance, risk management, internal controls and corporate governance, across industrial, agri-industrial, telecommunications, audit and services environments.
He has held leadership roles in internal audit, compliance and risk management, with direct responsibility for process assessment, risk identification and mitigation, design of internal control frameworks, policies and procedures, and reporting to senior management.
He has implemented and strengthened compliance programmes, including anti-corruption and anti-bribery policies, codes of conduct, due diligence processes, ethics channels, fraud investigation and indicator monitoring.
His experience includes work with frameworks and systems related to ISO 37301, ISO 37001, ISO 31000, ISO 27001 and ISO 9001, as well as COSO, COBIT and SOX.
He also brings relevant experience in inventory operations management, team leadership and process improvement, including a 46% reduction in stock losses and shrinkage in warehousing operations.
Areas of Expertise
Compliance and Governance
- ISO 37301 — compliance management system
- ISO 37001 — anti-bribery management system
- Compliance and integrity programmes
- Policies and procedures
- Code of conduct
- Due diligence
- Whistleblowing channels and ethics line
- Fraud prevention and investigation
- Corporate governance
Audit and Internal Controls
- Internal audit
- Process audit
- Financial audit
- Internal control assessment
- Compliance testing
- Process and risk mapping
- Corrective action plans
- Monitoring the implementation of recommendations
- Segregation of duties
- Access profile reviews
Risk Management
- ISO 31000 — risk management
- Risk identification and assessment
- Strategic, operational, financial and regulatory risk
- Process assessment
- Risk mitigation
- Enterprise risk management
- Risk and performance indicators
Management Systems and Technology
- ISO 9001 — quality management system
- ISO 27001 — information security
- Integration of risk, control and management systems
- COSO
- COBIT
- SOX
- IFRS
- ERP system controls and security
Operational Management
- Inventory management
- Loss and shrinkage control
- Process structuring
- Operational indicators
- Efficiency improvement
- Team leadership and management
Sectors of Experience
Credentials
30 years of professional experience
- Credentials
- 30 years of professional experience in audit, compliance, risk and internal controls
- MBA in Business Management and Finance — IBMEC São Paulo
- Degree in Accounting, with a focus on audit and management — Universidade São Judas Tadeu
- Executive experience in internal audit and compliance structures in Angola
- Implementation of compliance and governance policies and programmes
- Experience with ISO 37301, ISO 37001, ISO 31000, ISO 27001 and ISO 9001
- Experience with COSO, COBIT, SOX and IFRS
- Led a team of approximately 150 people in inventory management operations
- 46% reduction in stock losses and shrinkage in an agri-industrial operation
- Experience in fraud investigation and management of whistleblowing channels
- Experience implementing and reviewing internal controls and processes
Available Services
Compliance Consulting
Design and improvement of compliance management systems, integrity policies, codes of conduct, due diligence processes, whistleblowing channels and monitoring mechanisms.
Risk Management
Identification, assessment and treatment of strategic, operational, financial and regulatory risk, including processes aligned with risk management frameworks.
Audits and Internal Controls
Internal audits, process assessment, control testing, conformity analysis, non-conformity identification and follow-up of corrective action plans.
Governance and Integrity
Support in defining policies, procedures, governance structures, responsibilities, indicators and board reporting mechanisms.
Process Management
Process mapping and assessment, identification of inefficiencies, loss reduction, control improvement and definition of operational indicators.