Massimo Solari Email & Phone Number

Geneva, Switzerland

Information Security Governance, Risk and Compliance manager. Strong expertise on Business Continuity and High Availability. Personal Data Protection SME.CISA certified professional and certified Lead Auditor for ISO 27001, ISO 22301 and ISO 20000; strong experience with the most prestigious international IS standards such as NIST, PCI-DSS, Cobit, ITIL. FAIR methodology pratictioner.I have been managing international programmes and teams for more than 20 years. I have got a MBA, a PhD in Bioengineering as well as a Master Degree in Electronic Engineering.

London, United Kingdom

Responsible for designing and delivering BSI’s Information Security Management System including strategy; lead the introduction of appropriate structured methodologies to identify, evaluate and minimise risk to information resources; act as an Information Security consultant for the organisation; working with the BSI leadership and senior management to embed processes.The role spans governance, risk, compliance and assurance and the delivery of the strategy for implementing and improving these management systems.

London, United Kingdom

I worked as Information Security Officer at Condeco Group Ltd – a Company leader in the field of workplace management, meeting room and desk booking. I have been also appointed as Data Protection Officer in 2017.Condeco annual turnover (2017) is about 35 million Sterling Pound with more than 350 employees. Headquarters are based in UK (London) with branches in Germany, France, Sweden, Switzerland, Italy, United Arab Emirates, USA, Singapore, India, Australia, Hong Kong.I worked closely with all departments within the business to help deliver and maintain the required level of Information Security compliance. Main responsibilities were the design, implementation, operation and maintenance of the Information Security Management System (ISMS) and Personal Information Management System (PIMS); performing information security risk assessments and DPIA; assisting with both internal and external audits relating to information security and data protection; developing and maintaining suitable information security training and awareness programmes and materials and providing evidence of competencies; undertaking compliance monitoring and improvement activities to ensure compliance with internal security policies and applicable laws and regulations; obtaining suitable metrics to demonstrate the effectiveness of the ISMS/PIMS; assisting in resolution of IT Security incidents, monitoring them through to closure; responding to DSAR (Data Subject Access Requests); collaborating with the Legal Department for the preparation/validation of new GDPR schedules, contracts and DTAs; representing the organisation to clients and prospects at InfoSec level. Principal projects I have led have been ISO 27001 group certification, CSA Star certification, EU-GDPR compliance (according to BS 10012), Binding Corporate Rules (BCR) and Privacy Shield.

London, United Kingdom

I worked as Security Manager/Security Principal Consultant at Network Integration and Solutions Ltd (NIS) - a spin-off company of NIS srl, an Italian System Integrator operating in the field of Information and Cyber Security. Headquarters were based in Genoa with operating sites also in London, Milan, Turin and Rome.NIS most important Customers were Leonardo, Ericsson, GE-Avio, Alenia, Costa Crociere, Intesa Sanpaolo Bank, Carige Bank, Mediolanum Bank, Societe Generale, Symantech, Veritas, RINA Services.NIS Ltd provided products and services for the Information and Cyber Security - such as an IT Risk Assessment and Evaluation platform and highly innovative 3P solutions for vulnerability assessment – and manages complex industrial projects, auditing and training activities on Information Systems compliant with ISO 27001, ISO 20000, ISO 22301, Cobit, Sarbanes-Oxley, 262 and EU Data-Privacy Law.As Security Manager/Security Principal Consultant, thanks to a solid technological background maturated in more than 10 years working on High Availability solutions for large industrial programs (Siemens Telecommunication; Cisco Photonics; Marconi Mobile Access), I built up an IT Security Consultancy Team with the purpose to address all organisations security issues. I obtained the most prestigious international certifications on IT Security (CISA, LA 27001, LA 20000, LA 22301, Cobit 4.0, 5.0, ITIL, Computer Forensics and Digital Investigations).

Genoa Area, Italy

As Security Manager/Security Principal Consultant, thanks to a solid technological background maturated in more than 10 years working on High Availability solutions for large industrial programs (Siemens Telecommunication; Cisco Photonics; Marconi Mobile Access), I built up an IT Security Consultancy Team with the purpose to address all organisations security issues. I obtained the most prestigious international certifications on IT Security (CISA, LA 27001, LA 20000, LA 22301, Cobit 4.0, 5.0, ITIL, Computer Forensics and Digital Investigations). From 2003 till 2014 I worked as Principal Consultant on several highly critical IT Security projects, e.g.:• Intesa Sanpaolo (Risk Management Division) (http://www.intesasanpaolo.com): realisation of Cobit Narratives for the Risk Management Division. Alignment with the Company Information Security Policies.• GE-Avio (http://www.aviogroup.com): realisation of an Information Security Management System (ISMS) according to ISO/IEC 27001 and Cobit 4.1. ISMS scope covered 5 different locations in Italy.• ENAV (Italian Air Traffic Control Organisation) (http://www.enav.it): Risk Assessment of the Information System according to ISO/IEC 27001 (34 airports and 5 operational sites). The risk assessment activity has been conducted for the ATC System including every ACC, SAAV, CAAV, UAAV structure. More than 55 sites have been audited and assessed.• Costa Crociere (https://www.costacrociere.it): Realisation of the VirtualShip - a fully equipped Test Lab for the assessment of BusinessApplications before deployment. Preparation for the certification of the fleet according to ISO 27001:2013. • Capitalia (now Unicredit; formerly Banca di Roma, Banco di Sicilia, Fineco) (https://www.unicreditgroup.eu): Realisation of Security Policies according to ISO/IEC 27001 and Cobit 4.1.

Genoa Area, Italy

Responsible for the High Availability and Resilience of the Operation and Maintenance System of the MMA UMTS Network. Tecnology based on Sun Microsystems solutions for HA and Veritas Cluster Server.

Milan Area, Italy

Responsible for the High Availability and Resilience of the Operation and Maintenance System of the Cisco Optica Network. Tecnology based on HP and Sun Microsystems solutions for HA and Veritas Cluster Server.

Milan Area, Italy

Responsible for the High Availability and Resilience of the Operation and Maintenance System of the Siemens GSM Network. Tecnology based on Sun Microsystems solutions for HA and clustering.

Genoa Area, Italy

SW development projects for Digital Equipment and Sun Microsystems. Expert of C Multithreads programming, including Remote Procedures Calls.

Tsukuba Science City Ibaraki Japan

Pomezia (Rm) Italy

Master Of Business Administration (M.B.A.)

Doctor Of Philosophy (Ph.D.), Bioingegneria (Bioengineering)

Laurea In Ingegneria Elettronica (Electronic Engineering Degree)