Zoltan Tompa

Cofidis Group (formerly after

• • Built the local IT audit function from scratch following an MNB on-site inspection that mandated a dedicated IT audit role — policy framework, methodology, and risk-based annual plan.

• • Delivered IT and ICT audits aligned with DORA and ISO 27002, covering ICT third-party risk, ICT incident management, BCP/DR, identity & access management, and logging and monitoring.

• • Provided advisory support on the bank's DORA readiness: gap analysis, implementation alternatives, and remediation prioritisation across the DORA pillars.

• • Reviewed and contributed to internal regulations on ICT and outsourcing.

and information security services provider for the KBC banking group. Remote collaboration with the Belgian headquarters.

• • As part of the Chief Risk Officer's team, supported group entities on IT and cyber risk — conducting regular risk assessments, monitoring and reporting on the risk position of supported entities, and advising on the risk implications of new IT solutions, cloud computing and cybersecurity controls.

• • Built and led the internal audit function (1-4 people); developed and delivered annual and multi-year risk-based audit plans; reported to the Board of Supervisors, Management Board and CEO.

• • Acted as lead IT internal auditor: ICT outsourcing, IT risk analysis and risk mapping, IAM, server and network security configurations, log management, monitoring tooling. Standards: NIST, ISO 27001/27002, MNB recommendations.

• • Conducted on-site IT audits at outsourced data centres.

• • Maintained a professional audit team with appropriate certifications and skills; coordinated with parent company audit and external auditors.

• • Represented the bank in MNB supervisory engagements, including comprehensive on-site inspections and IT-focused reviews; led follow-up and closure of findings.