Karima Moubarki

– Lead the ICT (Information and communication Technology) Third-Party and vendor Risk Management workstream under DORA (Digital Operational Resilience Act) regulation and define applicable regulatory requirements. – Design and maintain a comprehensive implementation roadmap covering more than 2,000 ICT service providers. – Supervise the completion of the DORA Register of Information and the identification of Critical or Important Functions (CIF). – Coordinate stakeholder assessments of ICT services supporting CIFs. – Monitor workstream milestones and ensure timely delivery over a 23-month program.

– Develop and maintain IT risk maps, including risk identification, Scoring based on impact assessment, and definition of key controls. – Performed audits of critical service providers, covering cybersecurity, BCP/DRP, and crisis management. – Assess risks related to emerging technologies such as AI and Cloud services. – Monitor cybersecurity incidents within Operational Crisis Cells and coordinate mitigation actions. – Design and implement internal tool based on ServiceNow to steer overall action plans across the audit and control campaign portfolio. – Assess and monitor Information Security controls plans (levels 1 to 2.2) within an ISO/IEC 27001-aligned Information Security Management System (ISMS), including follow-up of corrective actions.

– Perform IT audits across security, vendor management, IT governance, change management, and project management. – Execute audit assignments for international subsidiaries (Greece, Italy, Spain, Japan, Ireland, Portugal). – Track and follow up on more than 100 audit recommendations per year. – Coordinate internal initiatives including training programs, audit automation, and awareness campaigns.