Caiã Oliveira
Head of Internal Control for Danone’s Benelux and DACH clusters. I turn technical risk into decisions that executives and boards act on.

- 15+Years of experienceAcross IT, internal audit, internal control and GRC, from software testing to leading internal control.
- 6IndustriesFood and beverage, music tech, appliances, energy, shipbuilding and consulting.
- 3CountriesA career built across Brazil, Sweden and the Netherlands.
- 4LanguagesPortuguese (native), English (proficient), Spanish and Dutch (beginner).
- 12TechnologiesPython, SQL, BigQuery, Power BI, Tableau, SAP, ACL, GCP, AWS, Jira, GitHub and Jenkins.
Experience
Fifteen years across IT, audit and controls.
Overview of all 8 roles
- 2023 — Present
Head of Internal Control (Benelux & DACH)
Danone · Amsterdam
Lead internal control for Danone’s Benelux and DACH clusters: 12 controllers, 600+ controls, 20 legal entities.
- Lead a cross-functional team of 12 internal controllers, speeding up project delivery and testing turnaround by 12%
- Lead Danone’s global internal control community of 35 international stakeholders, driving risk framework enhancements
- Supervise annual risk assessments and testing of 600+ controls across 20 legal entities (Sales, Ops, Finance, HR, IT/Cybersecurity)
- Built Power BI dashboards for SAP data analysis, saving 20 reporting hours a month and improving anomaly detection
- Present risk assessments and recommendations to the Board of Directors and senior executives, reducing high-risk items
- Reached 95% alignment with internal and external audit evaluations by managing audit activities and remediating control deficiencies
- 2022 — 2023
Manager, Internal Audit (Technology Risk)
Spotify · Amsterdam
Led technology-risk audits and SOX testing with a 100% control pass rate and zero material weaknesses.
- Led a team of 4–5 auditors across 5+ audit engagements a year, reducing technology and operational risk
- Ran NIST CSF and ISO 27001 risk assessments across HR, Finance, Royalty and core IT (machine learning, SDLC, DevOps, account security)
- Managed end-to-end SOX testing of ITGCs, with a 100% control pass rate and zero material weaknesses
- Designed risk mitigation strategies and controls addressing assessment findings
- Expanded audit coverage to 100% of data populations with Python, SQL, BigQuery and Tableau scripts
- 2020 — 2022
Manager, Internal Control (IT)
Danone · Amsterdam
Automated IT controls work with SAP and Power BI, saving 300+ hours a year.
- Saved 300+ hours a year (40% shorter cycle time) by streamlining SAP segregation of duties analysis
- Cut administrative overhead by 10% with SAP and Asana-integrated Power BI dashboards
- Evaluated ITGCs across key applications, closing control gaps with targeted remediation plans
- Managed digital transformation projects and implemented new systems, tools and process improvements
- 2017 — 2020
IT Solutions Lead
Electrolux · Stockholm
Launched a new SAP CRM platform in the UK, Belgium and Italy, cutting customer wait times by 20%.
- Drove the build, testing and go-live of a new SAP CRM platform in the UK, Belgium and Italy, cutting customer wait times by 20% and time-to-market by 10%
- Designed integrations between CTI, SAP ERP, SAP C4C, SAP Hybris and microservices
- Increased feature deployment velocity by 5% through backlog management and sprint planning
- Used data-driven analysis to guide product design, feature rollout and bug resolution
- 2015 — 2017
IT Internal Audit Specialist
Neoenergia (Iberdrola) · Brazil
Audited SAP and energy-market processes, cutting data analysis time by 50% with ACL scripts.
- Conducted IT audits of SAP ERP (MM, FI, CO, HR) and SAP IS-U/CCS against internal and market standards
- Mapped and audited supply chain, finance, HR and legal processes in the electricity market
- Developed 10+ ACL Analytics scripts, cutting data analysis time by 50%
- Created 5+ KPIs for process monitoring with the audited areas
- Facilitated workshops to design solutions for existing problems
- 2014 — 2015
IT Business Analyst
Enseada · Brazil
Improved SAP MM purchasing processes and shortened approval times.
- Assessed SAP MM purchasing processes, from purchase requisition to physical inventory
- Ensured ITGC compliance
- Troubleshot and analysed data to resolve SAP MM issues
- Improved purchase order forms and release strategy, reducing approval time in SAP
- Specified, tested and validated a new external processing procedure between subsidiaries
- 2013 — 2014
IT Risk Consultant
EY · Brazil
Performed 6+ ITGC audits and supported a full SAP ERP implementation.
- Took part in 6+ ITGC audits, guiding control testing strategies for the financial audit team
- Contributed to a full SAP ERP implementation (MM module) — requirements, process mapping, BBP, testing and training
- 2011 — 2012
System Analyst
Capgemini · Brazil
Tested software across 4+ projects, including 2 in banking.
- Analysed software requirements
- Developed manual and automated test cases
- Executed tests on 4+ projects, including 2 in banking
Expertise
Risk, technology and data.
Risk and controls
SOX, ITGCs, NIST CSF, ISO 27001, segregation of duties, risk frameworks and registers, control libraries, internal audit leadership
Technology
Cloud (GCP, AWS), security (authentication and authorization), machine learning, SDLC, CI/CD, DevOps, microservices, SAP ERP and CRM
Data
Python, SQL, BigQuery, Power BI, Tableau, ACL Analytics
Education
Computer science, then business.
MBA, Business Management
Fundação Getulio Vargas · 2013–2015
BSc, Computer Science
Universidade Salvador · 2008–2011
Certifications
- 5-Day Gen AI / AI Agents Intensive Course · Kaggle, 2025
- Google Cybersecurity Certificate · Coursera, 2023
- Certified ScrumMaster · Scrum Alliance, 2019
- Certified Tester, Foundation Level · BSTQB, 2012
Languages
- Portuguese · native
- English · proficient
- Spanish (Latin American) · beginner
- Dutch · beginner
Outside work
Usually training for the next race.
- Marathons
- Half marathons
- Cycling
- Gym
- Travelling
Contact
Let’s talk.
Want to discuss an interesting project, or just connect? I’m @caiaoliveira on most platforms.