Freelancer profile translated to English.
Back to original languageAbout Alaeddine
- Cybersecurity, GRC, and regulatory compliance consultant,Senior Lead Auditor & Lead Implementer ISO/IEC 27001and **PECB Certified Trainer**, I support organizations on targeted, high-value-added missions.
- **Internal Audit ISO/IEC 27001 & ISMS – Flash Missions**: Performance of targeted internal audits (1 to 3 days), external audits, and surveillance audits, with structured deliverables including audit plan, findings, report, and prioritized action plan (LSTI experience, ANSSI referentials).
- **Data Protection & ISO/IEC 27701**: Implementation and extension of Privacy Information Management System (PIMS), ISMS-GDPR articulation (certified ISO/IEC 27701 Foundation – PECB).
- **GRC Governance & Steering**: Creation and optimization of ISMS, risk analyses (EBIOS RM), definition of KPIs/KRIs and compliance dashboards (JIRA, Confluence, EGERIE).
- **Training & Awareness**: PECB certified training (ISO/IEC 27001 Lead Auditor & Lead Implementer) and practical workshops on internal audit, regulatory compliance, and operational resilience.
What sets me apart**: Over 16 years of experience, dual expertise as a field auditor / certifying trainer, and the ability to intervene quickly on **flash projectswith immediately actionable deliverables.
French
Native or bilingual
English
Fluent
Arabic
Native or bilingual
Spanish
Basic
Can work on-site
Paris (up to 50km), Nice (up to 10km), Nantes (up to 10km), Aix-en-Provence (up to 10km), Strasbourg (up to 10km)
Experience
- Capago
On Malt
Internal Audit ISO/IEC 27001:2022 of the ISMSTRAVEL AND TOURISMDecember 2025 - January 2026Paris, FrancePerformance of an internal audit ISO/IEC 27001:2022 within a tight deadline, with a primary focus on reviewing non-conformities from the external audit, evaluating implemented corrective actions, and verifying their operational effectiveness.The mission covered key clauses of the standard (4 to 9) as well as a targeted sample of Annex A controls, selected based on risk level and previous findings (governance, access management, incidents, changes, logging, monitoring, operational security).Work included:- Interviews with Management and key stakeholders,- Review of ISMS documentation,- Analysis of operational practices,- Assessment of control maturity and demonstrability,- Formalization of findings (observations and opportunities for improvement),- Clear and actionable reporting to secure the closure of non-conformities and enhance the overall maturity of the ISMS.Mission conducted with high reactivity, fluid communication, and a pragmatic, value- and results-oriented approach. - BNP PARIBAS SECURITIES SERVICESDEVOPS Security ChampionBANKING AND INSURANCEJune 2022 - November 2022 (5 months)Paris, France
- Secure integration of applications into the DevOps pipeline, respecting SDLC and internal policies.
- Monitoring and analysis of vulnerabilities from SAST/SCA tools (Fortify, SonarQube, Nexus IQ) and coordination of remediation.
- Contribution to the assessment and mapping of application risks.
- Cybersecurity referent for development teams, promotion of security standards and best practices.
- DOCAPOSTEHead of Security Certification/ISMS ManagerTECHMarch 2023 - Today (3 years and 3 months)Paris, France
- ISMS and ISO 27001, eIDAS, DORA, and NIS2 compliance management.
- Evaluation and compliance review of suppliers and partners.
- Contribution to certifications (eIDAS, CSPN) and security consulting.
- Monitoring of corrective action plans and security maturity.
- Management and execution of audits, security assessments, and risk analyses.
Recommendations
Be the first to recommend Alaeddine
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Professional Master's in Network and IS SecurityHigher Institute of Computer Science of Tunis2009Formation axée sur la cybersécurité avancée, incluant sécurité des réseaux, protection des systèmes d’information, cryptographie, audit et gouvernance.
- Engineering DegreeENIS (Sfax, Tunisia)2006Diplôme d’ingénieur couvrant systèmes informatiques, systèmes embarqués et électronique digitale
Certifications
- PECB Certified TrainerPECB
- ISO/IEC 27001: Senior Lead AuditorPECB