gabriele gallotti

I am an experienced Information Security Risk Manager currently based in Zurich, Switzerland. With a strong background in cybersecurity governance and risk management, I have successfully led audits and implemented critical security controls at SYGNUM BANK AG. My role as the primary audit coordinator has allowed me to act as the main point of contact for FINMA and ISAE 3000/3402 audits, where I have driven operational resilience improvements and ensured compliance with regulatory standards.

Throughout my career, I have developed a robust skill set in crypto security, managing over 35 controls for digital asset systems, and have authored key policies such as the Information Security Policy and IAM Guideline. My previous experience as a Cyber and Infrastructure Security Auditor at UNICREDIT S.P.A. has further honed my ability to execute cybersecurity audits aligned with NIST and ISO 27001 frameworks, enhancing organizational resilience through automated security assessments.

With a Master’s degree in Cyber Risk Strategy and Governance from Bocconi University and a Bachelor's in Computer Science and Engineering, I am passionate about leveraging my technical expertise and leadership skills to foster a secure digital environment. I am committed to continuous improvement and proactive risk management, ensuring that organizations can navigate the complexities of cybersecurity effectively.