Currently working as infrastructure and application Penetration Tester/ IT Security consultant.Pen-testing is my passion and the field I want to keep growing in. Main activities include:- Mobile/Web application penetration testing, manual/tool-assisted process aimed to discover security flaws in both commercial and built in-house tools, which could be exploited by malicious users. - Infrastructure Vulnerability Assessment / Penetration Test- Reporting and deliveryActivities are performed according -but not limited - to industry leading practices, like OWASP projects for Web and Mobile, and tools, like Burp suite Pro, de-facto standard for application testing.Past experiences:Financial Audit Support: IT-Assurance, Sarbanes – Oxley, internal audits and legal compliance engagements for several Italian and international clients in different industries. Performing also specific testing and data analysis like: Non-standard Journal Entries processing, IT-General Controls and Application Controls.IT Security Evaluation and Assessment (regulatory, maturity model, vulnerability and penetration test)Third Party Reporting: ISAE 3402 performed in IT Outsourcing Entities. Specific audit reporting for client internal audit or corporate department also for international client.Data Quality & Migration Test: System Migration between several clients systems. Analyzing the process of importing legacy data to a new system improving data management activities (data quality) and validating the data migrated.Segregation of Duties Analysis and Profile Design: project aimed at analyze and re-designing SAP roles and authorization profiles in compliance with internal and law requirementSupport Management to ensure compliance with external regulations (D. Lgs. 231/01, D.Lgs. 196, L. 262/05, Sarbanes – Oxley)