Daniele Binda

WORK HISTORY

EDUCATION

ABOUT DANIELE BINDA

Certifications: SWIFT CSP Assessor, ISO 27001:2022 Auditor, COBIT 2019, ITIL4• Implementation and auditing on the main international frameworks, laws and regulations for IT and Cybersecurity (D.O.R.A, ISO/IEC 27001, NIST, PCI-DSS, CSA CCM cloud security, SWIFT Customer Security Controls Framework, COBIT, PSD2, NIS, European Bank Authority - EBA guidelines)• Support to the Chief Information Security Officer, IT Compliance Officer and IT Risk Manager for all key activities and responsibilities• Security Incident management and Security Event Management processes and tools• Vulnerability Assessment and remediation plans• IT Risk Assessment activities based on the main international frameworks (ISO/IEC 27005, Magerit Enisa, EBA guidelines)• Implementation and auditing of “Business Continuity Plans” and \"Disaster Recovery Plans” based on main on the main international frameworks (ISO/IEC 22301, COBIT, ISO/IEC 27031)• IT Governance activities based on the main international frameworks (ITIL4, COBIT).• Sarbanes-Oxley Act (SOx) Auditing and implementation (ITGCs and finance business processes)• Assessment and implementation of internal controls (IT, financial reporting), based on COSO Framework• ISAE 3402, ISAE SOC1, SOC2 reports.• Compliance frameworks for legislative decree 262/2005 (internal controls on financial reporting and IT) and legislative decree 231/2001 (cyber-crimes and AML)• Enterprise Risk Management frameworks (ERM, Risk Appetite Framework)• Internal Audit support on IT, finance, operations and compliance processes (audit plans, test of controls design, test of controls effectiveness, audit reports, management letters, action plans).• Auditing of compliance to the GDPR European regulation (EU) 2016/679, focused on Privacy Information Management System and technical data protection measures (ISO /IEC 27701)• Knowledge of the international standards of auditing (ISA) and the international accounting standards (IAS) for financial statement audits (statutory and group reporting)• Business process assessment and reengineering (revenues and receivables, purchases and payables, period end financial reporting, financial controlling and budgeting, analytical accounting, construction contracts, payroll, inventory and warehouse management, other)• Fraud Auditing and segregation of duties assessment• SAP and ERP configurable controls and security (BASIS, MM, SD, HR, TR, FI modules).• Data analysis and data mining through the “Audit Command Language” tool• Project Management, Business development, partnerships coordinator