Freelancer profile translated to English.

Description

GRC & Architecture Cybersecurity Consultant (CISSP, CISM)

My mission: To support the security of critical and regulated information systems.

With over 20 years of experience in the Defense (Thales, Safran) and Industry (Air Liquide) sectors, I work on environments with strong regulatory and technical constraints.

My dual CISSP & CISM certification allows me to bridge the gap between strategic governance and technical architecture. My approach is guided by two principles: rigor through traceability and pragmatism in the face of risks.

I can assist you with the following missions:

- Management of large-scale projects: IAM strategies, Zero Trust deployment, security roadmap management, etc.

- Consulting & Governance: Support for CISOs and CIOs, structuring security posture and KPIs.

- SI Accreditation: Security dossiers (EBIOS RM) and regulatory/normative compliance (IGI 1300, II 901, GDPR, NIS, IA ACT, ISO 27001, etc.).

- Secure Architecture: Design of resilient solutions and system hardening (Security-by-Design).

In practice:

Language: Fluent English (TOEIC 935/990), accustomed to international contexts.

Mobility: Northwest Parisian area (78, 92, 95...) and bordering departments (60, 27, 76, 80).

Format: Hybrid or remote work.

Let's discuss your needs to see how my experience can secure your projects.

Languages

French
Native or bilingual
English
Fluent
German
Basic

Workplace preferences

Can work on-site

Cergy-Pontoise (up to 50km)

Air liquide
IAM Strategy Consultant (AMOA / Governance)
ENERGY AND UTILITIES
April 2024 - December 2025 (1 year and 8 months)
Courbevoie, France
International environment – 81k identities • 2,500 applications • multi-cloud GCP / AWS / Azure

- Management of an IGA strategic study (€500k) on a critical legacy system (IBM ISIM >25 years)

- Comprehensive IAM audit (technical, organizational, regulatory): SSO, SAML, OIDC, SCIM, JML, compliance

- Definition of the target IAM roadmap for 5 years: Recertification, RBAC/ABAC, SoD, NHI, onboarding ~500 assets, industrialization and automation (last mile), PQC

- In-depth market benchmark (100+ hours) & RFP management (Saviynt, SailPoint, Okta, Ping…), POC preparation

- Group CIO representative on the Airgas (US) CIAM program: >$100M (~70k MAU)
- Okta solution specification & negotiation
- Contribution to deployment (SAFe)
- Guarantee of alignment with group security policies

- Definition of Zero Trust Access strategy (NIST 800-207 / 800-63, SSF) & federated group CIAM

- Interface: CIO, CTO, CISO, compliance, legal

- Executive reporting
IGA AMOA Cybersecurity Governance IAM
SAFRAN
Cybersecurity Architect
DEFENSE AND MILITARY
February 2023 - November 2023 (9 months)
Éragny, France
Cybersecurity audit & systems engineering (maturity, software supply chain)

Structuring Defense SSI governance & accreditation strategy (IGI 1300, II 901)

Industrializing risk analyses: control framework (EBIOS RM, NIST, MITRE, ISO 27002)

Definition of MCS strategy & DevSecOps integration (SBOM, vulnerabilities, dependencies, contaminating licenses)
Governance, Risk & Compliance (GRC) MCS IGI1300 II901 Cybersecurity Architecture
Thales
BISO & Cybersecurity Lead
DEFENSE AND MILITARY
January 2017 - January 2021 (4 years)
Transverse cyber authority for critical regulated information systems (€30–130 million)

SSI Governance, compliance & accreditation management

Definition of secure architectures & security/cost/risk arbitration

Removal of costly contractual requirements through security by design

DGA interface & international coordination

Contribution to tender responses

Impact: +€30 million in contracts won
Risk Management systems engineering Security Accreditation Cybersecurity Governance Cybersecurity Architecture