Freelancer profile translated to English.

Description

Telecom Bretagne engineer in IT and Networks, I have over 15 years of experience in France in IT, including 12 in cybersecurity.

I was responsible for the cyber program and implemented ISO27001, NIS2, and DORA requirements at Arval, ING Bank, and Banque de France in an international context: integrating security into projects, GRC risk management, third-party management, operational resilience management, audit responses, etc.

At Arval, I managed risks and action plans (continuity, security, change, data integrity, outsourcing) for over 150 IT solutions used by Arval's clients and partners.

In third-party management, I qualified suppliers' security maturity, monitored improvement action plans, and negotiated contractual clauses.

I was brought in to coordinate internal teams, partners, and service providers and manage action plans (governance, continuity, security, change, data integrity, outsourcing) for IT solutions for the clients and partners of the large companies where I worked.

I also collaborated at BNP Paribas on the creation of a 'control tower' team dedicated to reducing IT incidents within an ITIL problem management framework, and created the associated KPIs.

Excellent interpersonal skills, I was in regular contact with executive levels and CISOs through cyber program monitoring. Rigor, adaptability, and autonomy are my main strengths.

Industry field of expertise

Languages

French
Native or bilingual
English
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

ARVAL France
Continuity & Security Officer
AUTOMOBILE
January 2022 - Today (4 years and 5 months)
Paris, France
Steering the IT & Business Architecture and Security Committee for validation of IT/Business projects (150 applications):
- Integration of security into projects
- GRC Risk Management: Continuity, Security, Data Integrity, Change, Third Parties
- Implementation of Iso27001, GDPR, Dora requirements: vulnerabilities, penetration tests, operational resilience
- Third-party evaluation (TPTRM) through monitoring of Security Assurance Plans (PAS) and negotiation of contractual clauses
- Response to security audit controls from BNP Paribas Group's internal audit
- Annual review of critical applications
- Tools: Service Now / Jira / Code Audit: Fortify, Sonatype, Qualys
Gestion des risques Gestion de projet Gestion des vulnérabilités Cloud Security Gestion des tiers
ING Bank France
Cyber Program Manager
BANKING AND INSURANCE
October 2018 - December 2021 (3 years and 2 months)
Paris, France
Steering the Cyber Program: security control evidence compliance:
- Preparation & facilitation of the monthly steering committee with the CIO
- Management of the compliance scoring system for a scope of 160 applications
- Creation, Documentation, and Implementation of management processes for:
Resilience, Access, Vulnerabilities, Cryptography, Data Leakage, Malware, Network Segmentation
Gouvernance Cybersécurité Gestion de projet Gestion des vulnérabilités Architecture cybersécurité Conformité
BANQUE DE FRANCE
Infrastructure Project Manager – NextDB project
BANKING AND INSURANCE
June 2017 - September 2018 (1 year and 3 months)
Paris, France
Steering the migration of database servers to a new PAAS Cloud service:
- Management of the impact study for the migration of 220 applications
- Choice of cloud service among 3 RFP offers
- Planning and control of migration operations budget for 2018
- Preparation and facilitation of the Project Committee for migration monitoring and deployment
Chef de Projet Infrastructure Infrastructure IT Base de données Cloud computing Migration de données