Italy’s banking sector sits at the center of constant cyber pressure: fraud and account takeover attempts, strict regulatory expectations, third-party risk, and always-on service availability. The leaders below stand out for building security programs that balance resilience, governance, and real-world delivery—across major banks, payments ecosystems, and financial sector coordination.
Luca Bertoglio — Chief Information Security Officer, Banco BPM
Luca Bertoglio is the CISO at Banco BPM, bringing a long track record across banking and industrial environments. Before Banco BPM, he held senior security leadership roles including Global CISO at Marelli, and previously served as CISO at CartaSi (now Nexi) as well as Head of ICT Security at ICBPI. His background also includes enterprise architecture and innovation leadership, giving him a blend of strategic security direction and execution experience across complex, regulated organizations.
Romeo Dal Molin — Chief Information Security Officer, Gruppo Crédit Agricole Italy
Romeo Dal Molin has served as Chief Information Security Officer at Gruppo Crédit Agricole Italy since 2016, building on earlier leadership as Head of IT Audit within the group. With prior consulting experience at Protiviti, Deloitte, and Arthur Andersen Business Consulting, his profile reflects a strong foundation in assurance, risk, and control—well suited to banking environments where auditability, governance, and operational risk management are core requirements.
Mario Trinchera — Chief Information Security Officer, ABI Lab
Mario Trinchera holds the CISO role at ABI Lab and serves as the technical coordinator of CERTFin, the Italian Financial CERT. In that capacity, he focuses on strengthening sector-wide cyber-risk management and resilience through security advisory, response coordination, cyber intelligence, and reporting—within a public-private initiative co-governed by ABI and the Bank of Italy. His work emphasizes collaboration, practical impact, and coordinated defense across the financial ecosystem.
Francesco Ortesta — Chief Information and Security Officer, Sparkasse · Cassa di Risparmio di Bolzano
Francesco Ortesta is Chief Information and Security Officer at Sparkasse · Cassa di Risparmio di Bolzano. His background spans general management, governance, procurement, operations, and large-scale cost and supplier consolidation work, including significant experience in IT procurement leadership within the MPS Bank Group. This mix of operational leadership and executive accountability supports a security approach grounded in business execution, stakeholder alignment, and organizational transformation.
Giovanni Lamberti — Chief Information Security Officer, Worldline Italia
Giovanni Lamberti is the CISO at Worldline Italia, with over 25 years of experience across delivery, service management, and complex systems. He brings credentials including PMP, ITIL, and ISO 27001 Lead Auditor, and has held senior security leadership roles such as Group CISO at Mooney and security governance leadership in financial services organizations. His profile emphasizes aligning security strategy with transformation programs, core process renewal, and modern platforms in high-transaction environments.
Michele Pavan — Chief Information Security Officer, Cherry Bank
Michele Pavan is the CISO at Cherry Bank, with more than 20 years focused on information security and cybersecurity, largely in banking and ICT services contexts. His experience covers security governance and compliance, privacy, IT risk analysis, and IT audit, supported by prior roles in banking security governance and consulting. His stated approach positions security as a strategic choice that protects information assets while supporting business credibility and continuity.
Alessio Sassu — Co-Chief Information Security Officer, Banca CF+
Alessio Sassu is Co-CISO at Banca CF+, overseeing cybersecurity program activities with a background rooted in infrastructure and cloud security across critical environments. His experience includes securing hybrid environments (AWS/Azure), and protecting SaaS/PaaS platforms such as Microsoft 365. His profile emphasizes practical execution—combining service management discipline with hands-on security coverage across modern banking technology stacks.
Gianluca Veltri — Co-Chief Information Security Officer, Banca CF+
Gianluca Veltri served as Co-CISO at Banca CF+ (through Feb 2026), with a background spanning cyber security leadership, penetration testing, and vulnerability assessment. Prior to Banca CF+, he was Head of Cyber Security at Credimi and previously held senior pentesting and consulting roles. His experience reflects strong technical depth paired with leadership in security program delivery.
Alessio Petracca — Head of Cybersecurity Protection, UniCredit Services
Alessio Petracca leads Cybersecurity Protection at UniCredit Services, with a background spanning protection leadership, group cybersecurity management, and earlier roles in IT security at ING. His experience includes supporting security strategy implementation, vulnerability management, and integrating security requirements into delivery processes—grounded in application and infrastructure security practices such as assessment, hardening, and secure development lifecycle controls.
Omar Chavarria — VP | Country Information Security Representative (CISO Italy), Deutsche Bank
Omar Chavarria is Deutsche Bank’s Country Information Security Representative (CISO Italy), with prior experience as Deputy CISO / Information Security Manager for the Italian business. His role includes driving security-by-design, overseeing critical third parties, supporting incident management, and acting as a key interface with audit and supervisory authorities (as described in the material provided). His background also includes banking IT risk operations and security architecture experience across large enterprise environments.
Shaping Cyber Resilience in Italy’s Banking Sector
Italy’s banks and financial service providers depend on security leaders who can translate risk into action—strengthening governance, resilience, sector coordination, and execution across complex technology stacks and third-party ecosystems. The leaders featured here represent that blend of strategic oversight and delivery discipline that modern banking cybersecurity demands.
