Improver

Luciano Chirico

IT Audit Manager, CISA, CISSP, ISO27001, ISO22301, COBIT, MBA, SCRUM SFC

Guildford, England

IT Risk & Assurance professional with 14 years of professional experience. Although Luciano has led many IT engagements, his specialty relates to IT Audits, Information Security, Internal Controls and Data Analytics.

Luciano is the IT Audit Manager at International Airlines Group (IAG) since June 2016. Before he was acting as an IT Risk & Assurance Manager at EY. During this time he has had the opportunity of developing team members and direct reports, helping them to reach their potential.

Luciano has an international experience as he has worked in multicultural environments in the UK, Spain, Ireland, Italy, France, Portugal, Switzerland and Latin America.

Luciano has two master’s degree: MBA and Systems Engineering. He has also achieved and maintained the following professional certifications: CISA, CISSP, ISO27001 Lead Auditor, ISO22301 Lead Auditor and COBIT Foundation.

Luciano is an ISACA and ISC2 Gold member since 2009 and 2011 respectively. He is also supporting the Cloud Security Alliance (CSA) Hybrid Cloud Security Working Group. Before he was an active member of the ISACA’s Assurance Task Force HQ in Chicago from September 2013 to December 2014. He also participated as a Subject Matter Expert for the ISACA publication “IT Control Objectives for Sarbanes-Oxley using COBIT 5, 3rd Edition”.

Skills:
•Big 4 experience (EY) in different countries
•Industry sector experience: aviation, financial services, construction, life science, energy, entertainment, manufacturing, retail and telecommunications
•IT Risks and Controls Management (COBIT)
•Internal and External Audit experience (COBIT, ITIL, COSO, PCAOB, UK Regulator)
•ICFR compliance (SOX 404, CNMV)
•Implementation of IT Internal Control Frameworks
•Cyber Security (NIST, ISO27001, NIS Directive)
•Cloud Computing
•Data Analytics and BI (ACL, Tableau)
•Business Continuity (ISO22301)
•Project Management (PMI, Prince 2)
•Toxic Combinations (SoD)

---

Experience:

• Senior, Advisory Services (EY)
• IT Audit Manager (International Airlines Group (IAG))
• Financial Services, IT Risk & Assurance Manager (EY)
• Advisory Services, IT Risk & Assurance Manager (EY)
• Executive, Information Security Department (CAF - banco de desarrollo de América Latina)

Skills: