Daniele Binda

Background

About Daniele Binda

ISO 27001 Auditor, COBIT 2019, ITIL4 certified. • Implementation and auditing activities based on the main international frameworks, laws and regulations for IT security and Cybersecurity (ISO/IEC 27001, NIST, PCI-DSS, CSA CCM cloud security, SWIFT Customer Security Controls Framework, COBIT, PSD2 Directive, NIS, European Bank Authority guidelines) • Support to the Chief Information Security Officer, IT Compliance Officer and IT Risk Management business units for all key activities and responsibilities • Security Incident management and Security Event Management processes and tools • Vulnerability Assessment and remediation plans • IT Risk Assessment activities based on the main international frameworks (ISO/IEC 27005, Magerit Enisa, EBA guidelines) • Implementation and auditing of “Business Continuity Plans” and "Disaster Recovery Plans” based on main on the main international frameworks (ISO/IEC 22301, COBIT, ISO/IEC 27031) • IT Governance activities based on the main international frameworks (ITIL4, COBIT). • Sarbanes-Oxley Act (SOx) Auditing and implementation (ITGCs and finance business processes) • Assessment and implementation of internal controls (IT, financial reporting), based on COSO Framework • ISAE 3402, ISAE SOC1, SOC2 reports. • Compliance frameworks for legislative decree 262/2005 (internal controls on financial reporting and IT) and legislative decree 231/2001 (cyber-crimes and AML) • Enterprise Risk Management frameworks (ERM, Risk Appetite Framework) • Internal Audit support on IT, finance, operations and compliance processes (audit plans, test of controls design, test of controls effectiveness, audit reports, management letters, action plans). • Auditing of compliance to the GDPR European regulation (EU) 2016/679, focused on Privacy Information Management System and technical data protection measures (ISO /IEC 27701) • Knowledge of the international standards of auditing (ISA) and the international accounting standards (IAS) for financial statement audits (statutory and group reporting) • Business process assessment and reengineering (revenues and receivables, purchases and payables, period end financial reporting, financial controlling and budgeting, analytical accounting, construction contracts, payroll, inventory and warehouse management, other) • Fraud Auditing and segregation of duties assessment • SAP and ERP configurable controls and security (BASIS, MM, SD, HR, TR, FI modules). • Data analysis and data mining through the “Audit Command Language” tool • Project Management, Business development, partnerships coordinator