Frank Mandalka has over 20 years’ experience in advisory and auditing in the financial services sector at Big Four and medium-sized audit firms. Since 2021 he has led the financial services IT audit team at Grant Thornton, which specialises in implementing and auditing the regulatory requirements on IT at credit institutions, financial services institutions, and payment and e-money institutions. It has a special focus on the implementation of the EU DORA Regulation on regulation of the financial sector in the areas of cyber-security, risks to control systems and digital operational resilience.
Field of expertise
Advice on implementation of the regulatory requirements of current MaRisk, BAIT and DORA, gap analyses on the proper implementation of the regulations and auditing of proper implementation as part of annual audits and internal audits, particularly regarding information risk and information security management, identity and access management, business continuity management and outsourcing.
Memberships
Specialist group on IT compliance in finance and insurance (ISACA)
- Certified Information Systems Auditor (CISA)