Freelancer profile translated to English.

Back to original language

Description

Cybersecurity consultant in governance, risk, and compliance with 9 years of experience, available ASAP.

I am looking for a long-term mission as a GRC consultant or Deputy CISO.

I remain available for any further information.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

GFS et BPCE SA
SECURITY CONSULTANT (GRC)
October 2022 - December 2025 (3 years and 2 months)
Compliance
• - Report inconsistencies for remediation to the process owner and the Archer GRC tool support
• - Aggregation of non-conformities from controls, penetration tests, and vulnerability assessments.
• - Monitoring of remediation plans until closure with supporting evidence
• - Use of the Archer GRC tool for production of
ISO 27005 EBIOS RM ISO 27001 Risk Analysis GRC
SOPRA BANKING SOFTWARE
SECURITY CONSULTANT (GRC)
October 2019 - September 2022 (2 years and 11 months)
Operational Security:
• - Organization of operational maintenance of security for outsourced clients
• - Participation in follow-up/steering committees,
• - Development and implementation of Cybersecurity KPIs and indicator monitoring.
• - Deployment of the Information System Security Policy (PSSI) in accordance with client strategic orientations or security products (example: SOC/SIEM)
• - Technological watch,
• - Vulnerability analysis as part of operational maintenance for my infrastructure scope (vulnerability analysis, threat assessment, new architectures, etc.)
• - Regular security updates with teams: Run managers, Technical teams, Client CISOs, etc.
• - Drafting of the Security Assurance Plan (PAS)
• - Scoping and monitoring of penetration tests for the Service's environments
• - Processing of client security questionnaires,
SOPRA BANKING SOFTWARE
SERVICE DELIVERY MANAGER
September 2018 - October 2019 (1 year and 1 month)
• - Management of all project phases (Build, Ramp-up, and Run)
• - Management of the activity backlog (requests and incidents)
• - Reporting
• - Individual follow-up of escalations received
• - Facilitation of follow-up committees and steering committees
• - Guarantee of the contractual quality of services delivered (SLA and penalty monitoring)
• - Operational management of the quality of services delivered by suppliers
• - Development of progress plans and formulation of action plans
• - Monitoring of incidents received
• - Coordination of the action plan with the client
• - Analysis of recurring issues and development of progress plans
• - Definition and recommendation of the group process for problem management (method, stakeholders, governance)
• - Documentation of activities related to this management
• - Handling of service needs for ServiceNow (ITSM) evolutions from the IT department
• - Participation in responses to tenders
• - Project quotations
• - Regular financial monitoring of contracts (communication of projected monthly revenue and Man-hours)
• - Management of the Windows Server 2016 migration project,