Paolo Calafiori

At EY, I translate NIS2 and GDPR requirements into IT risk registers, controls, policies, and remediation actions for digital-risk and compliance engagements.

I support ERM, Internal Audit, third-party risk, and AI governance digitalization through RSA Archer, ServiceNow IRM, ServiceNow AI Control Tower, and OneTrust. My work includes risk assessments, gap analyses, control testing, workflow configuration, dashboards, reporting, asset inventories, user manuals, and end-user training.

I also bring business-management training and hands-on financial analysis experience, including feasibility studies, forecasting, break-even analysis, and stakeholder presentations.