Maria Mateus Pinheiro

Portugal, Lisbon

GRC Specialist at Xpand-IT

Profession: Data Protection Officer, Privacy Consultant

Industry: Consulting, Data Privacy

About:

I am a GRC professional and Privacy Project Manager with a Law degree from the University of Lisbon and a postgraduate specialization in Data Protection Law. Over the years, I have built expertise in privacy, data protection, compliance, and project management, supported by certifications in AI and related technologies, reflecting my commitment to ongoing learning.

languages

Portuguese, English

Expertise:

EU LawData ProtectionGDPR

Experience:

Xpand-IT

GRC Specialist at Xpand-IT

September 2025 - Present • Lisbon, Portugal

GRC specialist focused on integrating governance, risk management, and compliance processes. I work closely with different teams to understand their processes, assess risks, and support the implementation of compliance programs. My goal is to ensure that the organization meets its compliance obligations while aligning with and achieving its strategic objectives.

Education:

Faculdade de Direito da Universidade de Lisboa

2022 - 2023

(IV Advanced Postgraduate Course in Data Protection Law)

Dr. Ethel Fonseca

United Kingdom, London

Partner at RBB Economics

Rita Leandro Vasconcelos

Portugal, Lisbon

Partner at Pérez-Llorca

Valerie Ruotolo

Italy

Siún O’Keeffe

Netherlands, The Hague

Acting Head of Strategy at Dutch Data Protection Authority