Freelancer profile translated to English.

Description

GRC Cybersecurity Consultant, I have 4 years of experience within large companies (banking, public sector, etc.), specializing in governance, risk management, compliance, and operational security. I undertake medium to long-term assignments (3 months or more).

I am open to hybrid or full remote assignments, with occasional travel possible depending on needs.

Languages

French
Native or bilingual
English
Fluent
Arabic
Basic
Spanish
Basic

Workplace preferences

Can work on-site

Paris (up to 50km)

ONEPOINT
Cybersecurity Consultant
April 2022 - Today (4 years and 2 months)
Paris, France
GRC Cybersecurity Consultant at the consulting firm Onepoint for 4 years, mainly involved in compliance and governance matters.
Consulting Compliance Cybersecurity Audit CISM
BNP Paribas Real Estate
Mission - Cyber Maturity Program Lead
REAL ESTATE
January 2025 - June 2025 (6 months)
Boulogne-Billancourt, France
Mission - Cyber Maturity Program Lead - NIST
- Audit and control of BNPPRE entities on the evidence provided in the different themes of the
CyberProgram established by the group based on NIST, ISO27001, PCI DSS, and DORA.
- Development and monitoring of a general action plan as part of compliance with the
CyberProgram for the 7 BNPPRE entities (France, UK, Germany, Spain, Italy, Poland, Benelux).
- Management of action plans implemented on requirements to increase the compliance level (+100
treated on IAM, development security, authentication, cryptography, and hardening topics).
- Work sessions and support for operational teams in updating their procedures.
- Facilitation of meetings and production of KPIs for the Real Estate entity and the BNP PARIBAS group.
Bred
ISO27002 Auditor
November 2024 - December 2024 (2 months)
BRED IT - BRED SA
- Analysis of existing security controls and identification of gaps compared to ISO 27002 best practices.
- Drafting of detailed reports with recommendations adapted to regulatory requirements and organizational needs.
- Presentation of results to stakeholders and proposal of a continuous improvement plan.