Looking for a job

Thomas Gauvrit Da Silva

@thomasgauvritdasilva

Message

I lead cybersecurity audits and DORA compliance programs for financial institutions and critical sectors.

France

Message

I've delivered cybersecurity audits and compliance roadmaps for Crédit Agricole, Crédit Commercial de France, Luminus, HSBC, Allianz Banque, and other financial institutions. My work spans DORA, NIS2, ISO 27001:2022, EPI (WERO), and general IT controls.

I lead audit teams, assess third-party ICT risk, identify control gaps, and turn findings into prioritized remediation plans, executive reports, and practical governance frameworks. I also built a Python data-correlation tool and helped identify roughly 80 critical or high-risk applications for a major telecom organization.

Experience

Work history, roles, and key accomplishments

IT Consultant - Manager

Telecom

Contributed to an application inventory mission for a major telecommunication company, defining scope and methodology, prioritizing critical business applications, and performing basic risk analysis based on CIA scoring.

Python CMDB Zscaler Lansweeper Microsoft Defender WatchTowr Beamy Correlation Risk Analysis Stakeholder Management

IT Lead Auditor (EPI)

Financial Institutions

Led IT audit engagements for financial institutions assessing readiness for EPI (WERO) scheme certification, managing a team of auditors and reviewing findings for evidence quality.

IT Audit ISO 27001 EPI Team Management Microsoft Office 365

IT Auditor and Compliance Advisor

Financial Institutions

Ensured financial entities' alignment with DORA, focusing on ICT Third-Party Risk Management, including gap analysis, compliance roadmap support, and workshops.

DORA TPRM Gap Analysis Compliance SharePoint Microsoft Office 365

IT Lead Auditor (NIS2 / ISO 27001)

Energy

Led IT audit for an energy sector company against ISO 27001:2022 controls mapped to NIS2 requirements, performing gap analysis and issuing prioritized remediation recommendations.

IT Audit ISO 27001 NIS 2 Gap Analysis Microsoft Office 365

From IT Auditor to Senior IT Auditor

Financial Institutions

Contributed to external IT audits for financial entities, assessing general IT controls, cybersecurity frameworks, and ensuring alignment with ISA regulatory requirements.

IT Audit GITC ISA PCAOB NIST SharePoint Microsoft Office 365 ServiceNow