Profilo professionale
Panoramica
Esperienza lavorativa
Istruzione
Competenze
Custom
Competenze linguistiche
Certificazioni
Cronologia
Generic
DALILA GIACALONE

DALILA GIACALONE

Valsamoggia

Profilo professionale

Dalila has held the role within the Information Risk Management & Internal Controls Department in CRIF since 2017.

She has more than 14 years' experience in Information Risk Management and IT audit activities, during which time she has developed in-depth knowledge of audit techniques and international control system frameworks. She has specific expertise in audit management and more specifically, this includes risk assessment, audit execution, issue calibration and reporting.

In details, she has competencies in the following topics:

  • Knowledge of international standards and best practices in terms of Information Security & Governance (e.g. ISACA, COBIT, ISO27000 family, NIST Cybersecurity Framework);
  • Knowledge of data protection rules and principles, with particular reference to GDPR;
  • IT and Business processes mapping and analysis;
  • Risk assessment and management;
  • Audit planning, organizing, execution and issue management with a risk-based approach;
  • Knowledge of IT assurance international model (e.g. ISAE3402 e ISAE3000);
  • Business continuity management system;
  • Data and ICT regulations knowledge (e.g.. Financial Applicable regulations, L.262 e D.Lgs. 231/01, GDPR, PSD2, DORA, EU AI ACT..)

Previous experiences:

  • KPMG Italy S.p.A., experience in external/internal audit, within the financial and technology industry and Information Risk Governance in international firms (Financial Institutions entities, Banks)
  • GE Oil&GAS, experience in the Quality Assurance Management department in the ISO9001 Schema maintenance.

Panoramica

15
15
years of professional experience
1
1
Certification

Esperienza lavorativa

Consultant - Information Risk Management

KPMG S.p.A
Bologna
01.2011 - 06.2017

Experience in external/internal audit, within the financial and technology industry and Information Risk Governance in international firms (Financial Institutions entities, Banks)

  • Oversaw the creation and maintenance of a risk register to track and monitor risks across the organization.
  • Reported findings on risk exposures to senior executives and board of directors.
  • Monitored regulatory changes affecting risk management practices and ensured company compliance.
  • Conducted detailed risk assessments across various departments to identify vulnerabilities.
  • Provided expert guidance on emerging risks and trends, positioning the organization to proactively address challenges.
  • Developed business continuity and disaster recovery plans to minimize operational disruptions.
  • Engaged stakeholders in risk identification and assessment processes to ensure comprehensive coverage.
  • Developed and implemented comprehensive risk management strategies to mitigate potential losses.
  • Designed and executed risk mitigation plans, ensuring alignment with organizational objectives.
  • Managed insurance procurement, including policy selection and negotiation with underwriters.
  • Collaborated with external auditors and consultants on risk management audits and assessments.
  • Implemented loss control measures to protect workers and mitigate workplace hazards.
  • Facilitated risk management training sessions for staff to enhance risk awareness and compliance.
  • Analyzed reporting strategies and data to create educational programs.
  • Conducted regular reviews of risk management practices to identify areas for improvement.
  • Conducted in-depth analyses on potential risks, impacts of new legislation or potential economic factors related to financial activities.
  • Compiled and submitted regular reports to update senior management on operations and progress.

Quality Assurance Support

General Electric Oil&Gas
11.2010 - 05.2011
  • Trained new employees on company and safety standards, providing assistance and remediation with issues.
  • Facilitated communication between departments to ensure project alignment.

Director

CRIF SPA
Bologna
06.2017 - Current
  • Applied audit fundamentals to identify risks and develop action plans.
  • Conducted audits on internal controls and developed reports on findings.
  • Met with stakeholders to discuss compliance audit plans and results, explaining options for improvement.
  • Made recommendations to resolve compliance audit findings.
  • Managed completion of planned audits, reviewed records, and procedures for accuracy to accomplish objectives and appraised policies and plans under audit review.
  • Organized and deployed resources to execute audit plans.
  • Communicated audit plans to executive management team.
  • Prioritized multiple, concurrent projects to deliver high-quality results.
  • Adhered to audit principles, standards, and practices to keep company in good standing.
  • Supervised and coordinated projects for external auditors and examiner evaluations.
  • Trained, developed, and provided performance management initiatives to audit staff.
  • Directed completion of planned audits, assessed records and procedures for accuracy to accomplish objectives and appraised policies and plans under audit review.
  • Designed internal control policies to improve audit scores.
  • Managed and trained team members to enhance audit department performance and increase operational efficiency.
  • Collaborated with external partners to complete audits.
  • Wrote reports, authored papers and organized supporting documentation.
  • Complied with Sarbanes-Oxley Act and GAAP principles to maintain complete transparency.

Director

CRIF SPA
Bologna
06.2017 - Current
  • Managed many policy renewals each year.
  • Interviewed prospective clients to learn about financial needs and discuss existing coverage.
  • Presented and clearly explained insurance policy options based on clients' needs and goals.
  • Consulted with clients to develop customized insurance policy packages and advised clients on investment opportunities to safeguard assets while minimizing cash flow.
  • Researched coverage and premium options and supplied clients with best coverage available for individual needs.

Director

CRIF SPA
Bologna
06.2017 - Current
  • Led teams of risk management and operational personnel in development of hazard analyses and risk assessments.
  • Participated in business safety committee meetings and health and safety audits.
  • Recommended methods to reduce ongoing hazards with improved methods, processes and materials.
  • Conducted safety training or education programs to demonstrate use of safety equipment.
  • Trained new employees in proper safety procedures to minimize accidents with proper behaviors.
  • Supported health and safety technicians aligned to facility by providing guidance, coaching and direction.

Istruzione

Laurea secondo livello - Ingegneria Gestionale

Università di Pisa
PISA
2008 - 2011

Laurea primo livello - Ingegneria Gestionale

Università degli studi di Pisa
PISA
2005 - 2008

Maturità scientifica, PNI (Piano Nazionale Informatico) -

Liceo Scientifico “G.P.Ballatore”
Mazara del vallo

Competenze

  • Risk management
  • Internal controls
  • Internal and external Audit management
  • Insurance management
  • Information security management system
  • Business Continuity Management
  • Crisis Management
  • ISO Schema design, implementation and maintenance

Custom

True, True

Competenze linguistiche

Italiano
Lingua madre
Inglese
Avanzato

Certificazioni

  • ISO 27001 Lead Auditor

Cronologia

Director

CRIF SPA
06.2017 - Current

Director

CRIF SPA
06.2017 - Current

Director

CRIF SPA
06.2017 - Current

Consultant - Information Risk Management

KPMG S.p.A
01.2011 - 06.2017

Quality Assurance Support

General Electric Oil&Gas
11.2010 - 05.2011

Laurea secondo livello - Ingegneria Gestionale

Università di Pisa
2008 - 2011

Laurea primo livello - Ingegneria Gestionale

Università degli studi di Pisa
2005 - 2008

Maturità scientifica, PNI (Piano Nazionale Informatico) -

Liceo Scientifico “G.P.Ballatore”
DALILA GIACALONE