Freelancer profile translated to English.

Description

I am Arnaud, a specialist in cybersecurity, governance, and risk management, with solid experience in the automotive and industrial sectors. Unlike many purely technical or purely GRC freelancers, I bring a dual skill set: mastery of standards (ISO 21434, UNECE R155, TISAX) and the ability to develop concrete tools to accelerate compliance, automate analyses, and ensure process reliability.

My goals: I aim to support companies that want to professionalize their cybersecurity, gain efficiency, and sustainably structure their practices.

My ambition: to become a strategic partner, capable of providing vision, methodology, and tools to accelerate your compliance and strengthen your cyber posture.

What I do best:

- Cybersecurity Governance & Compliance: implementation of frameworks, audit management, support for ISO 21434 / R155 / TISAX.

- Risk Management & TARA: robust analyses, models adapted to your projects, prioritized risk reduction.

- Security Tool Development: scripts, automations, dashboards, internal tools to save time and ensure process reliability.

- Technical Coordination: fluid interface between development, engineering, security, and management teams.

- Optimization & Structuring: creation of methods, templates, workflows, and repositories to industrialize security.

Work with me, and I will bring you the rigor of a GRC expert, the vision of a security architect, and the pragmatism of a developer with a systems perspective.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent
German
Basic

Workplace preferences

Can work on-site

Les Ulis (up to 50km)

Expleogroup
Cybersecurity consultant
DEFENSE AND MILITARY
April 2024 - May 2025 (1 year and 1 month)
Saint-Cloud, France
Role
• Aviation cybersecurity;
• Integration of new connectivity;
• Objectives: define and industrialize secure exploitation artifacts and chains for embedded functions.

Your achievements
• Definition and industrialization of security artifacts and traceability processes compatible with avionics cycles.
• Support for Hardware/Software integration and definition of validation requirements and software coverage.
Responsibilities
• Define the exploitation chains for security artifacts.
• Define the necessary technical and organizational means.
• Transverse support to project teams.

Technical environment
Cybersecurity standards and methods; artifact management; Windows/Linux
Industrial Cybersecurity Cybersecurity Governance Process Definition
Expleogroup
Cybersecurity consultant
AUTOMOBILE
May 2022 - November 2023 (1 year and 6 months)
Paris, France
Role
• Automotive cybersecurity leader;
• IVI Crony2 project for Stellantis;
• Objectives: manage and monitor all cybersecurity activities related to the product, ensure the production of deliverables compliant with ISO 21434, and conduct risk analyses.

Your achievements
• Management and support for the production of ISO 21434 compliant deliverables.
• Drafting of SOWs for pentests and review of pentest reports.
• Performance of vulnerability analyses and definition of items.
• Performance of a TARA at the software level according to ISO 21434.

Responsibilities
• Management of ISO 21434 deliverable production (TARA, risk analyses, security documentation).
• Performance of a software TARA at the application and middleware level.
• Drafting of SOWs and review of pentest reports; monitoring of corrective actions.
Industrial Cybersecurity Cybersecurity Governance ISO 21434 Risk Analysis
Expleo
Internal Team Manager
DIGITAL AND IT
May 2017 - May 2025 (8 years)
Saint-Quentin-en-Yvelines, France
- Monitoring of services, timesheets, absences, annual reviews

- Technical support on assignments
- Participation in tender responses
- Internal training
Team Management Operational Management Internal Training