I aim to find the most suitable correspondence between business and security requirements, pursuing innovation through the safe and effective use of ICT to enable the business and ensure reliability, helping organizations enhance their information security posture.I joined Docebo in 2016, when it was still a small company, to build its ICT Security team and a comprehensive and effective information security program. Under my direction, the team grew to over 10 people developing a strong security posture for the entire organization that has successfully supported the company's growth to its current size of about 1000 employees and an ARR of 200 million USD. In the last 2 years at Docebo I have focused on the Governance Risk Compliance area, managing the maintenance of all ISO 2700X certifications, the SOC 2 report, and supporting the further growth of the team as well as the adoption of frameworks such as NIST 800-53, CSF, and AI RMF.I graduated from Pisa University with an M.S. in Computer Science, I have participated in company start-ups and collaborated with consulting firms, and multinational high-tech and cloud services companies, playing the roles of Business Unit Director, Chief Information Security Officer, GRC Director, and Cyber Security Consultant. During my career, I carried out managerial and advisory activities, business development, and directional and technical consulting concerning cybersecurity, ICT risk management and compliance, technological innovation, and strategy development.My skills comprise: - Strong interpersonal and communication skills with the ability to simplify complex topics for understanding and critical decision-making. - People management and team building across global organizations.- Security regulations and standards (GDPR, ISO 2700X, ISO 31000, NIST CSF, NIST 800-53, PCI-DSS, OWASP, COBIT, CIS, AICPA/ISAE300 SOC2, SOX, FedRAMP).- AI risk management and compliance with applicable frameworks and regulations (ISO 42001, NIST AI RMF, EU AI Act).- Governance Risk Compliance strategies and GRC solutions adoption.- Control and risk management concepts and methodologies.- Cloud Security Management, CSPs Shared Responsibility Models, Preventive/Reactive Guardrails, Continuous monitoring, with special regard to Amazon AWS environment.- Business Continuity, Disaster Recovery, ISO 22301, ISO 22317, BIA execution, design and implementation of Business Continuity plans.- Secure SDLC, OWASP, Threat Modelling, SAST and DAST.- Development of ISMS and information security programs.