Led and executed the full life-cycle overhaul of bespoke enterprise software, focusing on improving business processes, enhancing security, and increasing reliability. Delivered a solution that aligns software with business workflows, boosting efficiency with finely tuned processes. The software was developed using C# and MSSQL.Currently managing the Group’s migration to cloud technology with Microsoft 365 and Azure, transitioning from on-premises systems to a full cloud solution. This migration enhances mobility for employees and services by moving mail, document management, and collaboration to the cloud.Advising the Board of Directors on IT, business improvement, information security, and regulatory compliance, with a key focus on IT. Currently leading DORA compliance and successfully guided the organization through CRS, MiFID II, MiFIR, the 4th AML Directive, and GDPR implementation.Designed and implemented comprehensive Business Continuity and Disaster Recovery plans, including the establishment of a secondary site for remote operations, meeting regulatory requirements from state and EU authorities.Developed and enforced a corporate IT security policy, incorporating SIEM/SOAR, DLP, EDR, and other security measures. Delivered security awareness training, emphasizing social engineering, phishing, and identity theft, while revamping company practices.Managed the replacement of obsolete systems, including PABX and telephonic systems, integrated with billing systems, and modernized legacy software such as Sage Line 100. Oversaw the digitization of key back-office documents.Regularly analyze business processes to identify inefficiencies and design improvements, ensuring alignment with standards and regulations set by MFSA, CBM, ESMA, and other authorities. Delivered training on IT security, scam detection, AML, and office automation.

Drove the Bank’s initiatives on DORA compliance, starting with a full gap analysis against the regulation and the relevant RTSs and ITSs and addressed any of the resulting gaps. This includes implementation of an ICT Risk Register, ICT Business Continuity Plan and Incident Escalation procedure for ICT Major Incident reporting requirements.Managed the ICT service delivery from the Bank’s providers, holding regular KPI reviews, Incident reviews and GRC reviews with all relevant stakeholders. Additionally, provided ICT and regulatory reviews of all ICT vendors as part of the Bank’s vendor management processes.Participated in Bank NPAP on new business lines and new services providing ICT regulatory reviews, capacity reviews and security reviews (together with the InfoSec Team).Handled all Internal and External Audits, Thematic Reviews with the MFSA and regulatory returns to various regulators relating to ICT and ensured that all requirements were delivered correctly and on time to the auditors/regulators.Reviewed existing processes and made corrections, changes or outright redesign of any gaps or regulatory breaches found through these reviews.Worked closely with the Group CTO to align the Group’s strategy and the Bank’s strategy, ensure that all entities within the group are following banking ICT regulations and draw and enact action plans to address and implement any gaps or deviations.

Led and executed the full life-cycle overhaul of bespoke enterprise software, focusing on improving business processes, enhancing security, and increasing reliability. Delivered a solution that aligns software with business workflows, boosting efficiency with finely tuned processes. The software was developed using C# and MSSQL.Currently managing the Group’s migration to cloud technology with Microsoft 365 and Azure, transitioning from on-premises systems to a full cloud solution. This migration enhances mobility for employees and services by moving mail, document management, and collaboration to the cloud.Advising the Board of Directors on IT, business improvement, information security, and regulatory compliance, with a key focus on IT. Currently leading DORA compliance and successfully guided the organization through CRS, MiFID II, MiFIR, the 4th AML Directive, and GDPR implementation.Designed and implemented comprehensive Business Continuity and Disaster Recovery plans, including the establishment of a secondary site for remote operations, meeting regulatory requirements from state and EU authorities.Developed and enforced a corporate IT security policy, incorporating SIEM/SOAR, DLP, EDR, and other security measures. Delivered security awareness training, emphasizing social engineering, phishing, and identity theft, while revamping company practices.Managed the replacement of obsolete systems, including PABX and telephonic systems, integrated with billing systems, and modernized legacy software such as Sage Line 100. Oversaw the digitization of key back-office documents.Regularly analyze business processes to identify inefficiencies and design improvements, ensuring alignment with standards and regulations set by MFSA, CBM, ESMA, and other authorities. Delivered training on IT security, scam detection, AML, and office automation.

Subcontracted with IBM on the IUBS Smart Meters Project, joint venture of Enemalta, Water Services Corporation and ARMS Ltd to automate readings for meters across the whole country into the three companies' ERP system (SAP).Tasks covered: Implementation of ECC, CRM, BI, PI, SOLMAN, and ISU and Enterprise Portals. Maintenance and support of said systems. Authorisation structure implementation, maintenance and support for all systems for the three companies.SQL and Code optimisation support.Day to day Basis tasks.Team administration and management.

Subcontracted with IBM on the IUBS Smart Meters Project, joint venture of Enemalta, Water Services Corporation and ARMS Ltd to automate readings for meters across the whole country into the three companies' ERP system (SAP). Initially contracted as a Junior Consultant, later took on the role of Senior Consultant and Team Leader.

Technical and Team Lead of the SAP Basis Team on the IUBS project. Besides handling day-to-day Basis duties, I am also in charge of Authorisations, including building models and profile/roles, and providing first line-support to the functional teams.