Davide Bracci

Information Security Lead @Covisian

Milan, IT

Develop, enhance, operationalize enterprise-level security, risk policies, processes, and controls to mitigate risk and comply with applicable laws and regulations- Assesses the potential impact of cybersecurity risks on critical business processes and functions-Performing activities to monitor and assess security, risk, and privacy controls- Collaborates with business leaders to strike a balance between security requirements and the need for business agility, innovation, and growth- Lead and contribute to M&A due diligence activities in relation to information security- Work closely with the business departments (Legal, Engineering, Sales, Support, Operations, …) to develop, monitor policies and standards in compliance with applicable privacy policy & regulations- Collaborate with key stakeholders to review projects, business critical systems and related data to ensure compliance, perform and advise on business impact assessments- Performs security reviews and identifies security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy- Perform and evaluate vendor management reviews- Ownership and responsibility to answer information security questionnaires from customers and official instances- Coordinate, conduct and function as contact for all internal and external audits regarding information security & compliance- Identify, track, monitor and report on information security controls- Perform cyber risk trend analysis and reporting- Responsible for the regulatory training of employees and contractors.

Università degli Studi di Genova

Business administration