Dr. Francesco Metalli

Looking for challenging role as PM, IT audit manager, IT security consultant, information management consultant. Immediate availability. Please note, do not speak German

Successfully deployed, in record time and on budget, a complete non-technical solution to a global and highly sensitive challenge in the field of information and record management

On a contract basis, providing IT audit services to Shell International (Headquarter in the The Hague) in the field of IT strategy and security, IT projects, compliance, assurance and data privacy. Big 4 methodology. ITGC, COBIT, ITIL, ISO 27001

PCI-DSS strategy and implementation Program and project management Risk identification and mitigation Third party security and risk assessment

IT risk and audit services for the largest UK employer, G4S

In charge of IT audit strategy, program planning and implementation, for the IT audit policies and procedures, stakeholders management, reporting, and IT audit fieldwork (hands on). Also co-responsible for worldwide IT governance risks and controls. Audit experiences in 45+ countries for cash services, security services (manned guarding and alarm monitoring), ERP systems, IT governance, policies, project management, structures and procedures, data migration and system integration, etc.

Speaker, 3rd Annual Strategic IT audit Conference, 2007, Amsterdam - Speaker and Chairman, 5th Annual Pan-European event, Internal Audit Conference, 2009, Barcelona - Speaker, 3rd Annual IT Governance Conference, 2009, Amsterdam - Speaker, 2dn Annual Master Data Management Conference, 2009, Berlin - Author, Managing Information Risks in Complex IT Systems, Institute of Internal Auditors, 2007 - Participated to 'An Inside Job', article published by the PM Network, July 2009

Directed the IS security and integration programme - strategy and planning, at CIO level; Co-ordinated the creation from the scratch of the organization’s overall security strategy and architecture. Programme manager for all integration and security related projects. Co-ordinated the development and deployment of the Business Continuity Plan and the Disaster Recovery programme and directed the introduction of ISO 17799 (BS 7799).

Responsible for the protection of classified information as ISSO; Drafted security policies and procedures, and performed risk and impact analysis; In charge of ensuring information handling consistent with several international, EC and national laws on data protection, like the Data Protection Act (UK 1998), Freedom of Information Act (US 1996), and the overall Legal Framework for IT Systems etc; Created and directed the security awareness training; Created the office for IS Security.

While employed by Europol, I was requested by OPCW top management to lead in a comprehensive IT/Security audit on the information management systems used by the organisation. I have been busy with this project for two years. In the first phase, I provided guidance to a small group of international IT security experts within a typical audit engagement. In a second moment, after completion of the audit, the team continued to work as an external consultant for the organisation.

was requested, on a short contract basis, to manage a team of software developers in charge of building and deploying a customer relationship management system for one of the largest divisions in Shell. The scope of work was to salvage the project, which was over budget and time when I joined. In two months time, I succeeded to get the project back on track, nominated a new project manager, and left the company to join Europol.

I worked as commercial representative for software and hardware during 1994-1995 for Giuffre Editori, one of the most well-known publishing companies in Italy. At that time, the company was producing and commercially distributing one of the first data-banks on CD ROM. The customers were law professionals and public administration. My tasks were including everything between the pre-sale and post-sale period, advertisement, training, installations, configuration, maintenance and support.

At the beginning of 1995 I set up a one-man company. Its mission was to offer computer support, training and maintenance to both private users (often left alone since the post-sale service at the time was extremely poor) and to professionals.