Freelancer profile translated to English.

Description

I have extensive experience in risk management and in regulatory and compliance projects, as well as in Information System evolutions (Master Plans, Study Directorate, Organization & Processes…)

My initial expertise lies in the transformation of Finance functions (Financial Directorate, Risk and Regulatory) within financial organizations.

Through my assignments, I have leveraged my skills and evolved towards managing high-impact organizational projects, focusing on transformation and operational efficiency.

AREAS OF EXPERTISE

=> Governance

• Support for Directorates (CEO, Board, CIO…)

• Compliance Audits (Regulatory, Compliance)

• Risk Management and IS (ISO 27005 and ISO 27001 certification)

• Cybersecurity, EBIOS RM expert

• Strategic Recommendations and Planning

• Governance Development

• Master Plan

• Process, functional, and application mapping

=> Project Management

• Strategic Support

• Program Management

• Governance and Management

• Project Management

• Scoping and Studies

• Solution Development and Deployment

SOFT SKILLS

- Anticipation and responsiveness

- Autonomy and rigor

- Decision-making and adaptability

- Empathy and open-mindedness

- Critical thinking and synthesis

- Leadership

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Lyon (up to 75km), Nantes (up to 75km), Bordeaux (up to 75km), Rennes (up to 75km)

Qare SAS
External DPO - Expert Risk Management and Cyber
MEDICAL
September 2023 - Today (2 years and 10 months)
As part of its license renewal, the company must have its teleconsultation platform risk audit conducted.
This risk audit covers the following aspects:
- IT Risk
- Data Security
- Cyber Sensitivity
- Impact Analysis and Remediation Plan
External DPO ISO 27005 Risk Mapping ISO 27001 EBIOS RM GDPR Compliance
Predilife
RSSI as a Service - GDPR Compliance
MEDICAL
April 2023 - Today (3 years and 4 months)
Paris, France
Part #1: RSSI (CISO)
Establish the foundations and organization for risk management, particularly in the Cyber domain:
- Risk analysis and management organization,
- Implementation of the EBIOS and Risk Management methodology,
- Organize and manage vulnerability and penetration tests (Red Team),
- Define the remediation plan and its priorities,
- Support for medical device certification.

Part #2: Assistance to the DPO
Strengthen the actions of the DPO, currently the company's legal director:
- Support the DPO in their actions and decisions,
- Ensure compliance and prepare the register,
- Manage DPIAs,
- Challenge the chosen analysis and compliance options,
- Provide an external perspective on ongoing actions.
Cybersecurity EBIOS RM Risk Management ISO 27005 DPO GDPR Compliance Risk Mapping
GEA Group Aktiengesellschaft
Security audit of the French subsidiary (organization, process, and IT)
AGRICULTURE
January 2023 - February 2023 (1 month)
Montigny-le-Bretonneux, France
Cybersecurity
- Analysis of risks and weaknesses

IS Security:
- Identification of weaknesses and processes to secure
- Compliance check with Group ISO 27001 rules
- Documentation review
- Audit report and recommendations
Security Audit ISO 27001 Cybersecurity Risk Management Security Audit Internal Control