Freelancer profile translated to English.

Description

Cybersecurity Director | Outsourced CISO | Expert in Industrial OT Audit & Security

Since 2001, I have been supporting organizations of all sizes — large groups, mid-sized companies, public institutions — in making cybersecurity a performance driver, not an administrative burden.

With over 25 years of experience as Group CISO and Cybersecurity Director (Kronenbourg, CNAF, SopraSteria, Colas Rail), I offer a comprehensive, operational approach tailored to your context.

What I bring to my clients:

Audit & Risk Analysis — Performing risk analyses using EBIOS RM, NIST CSF 2.0, and Méhari methodologies. Internal and external audits, IT and OT architecture reviews, drafting of PSSI and actionable remediation plans.

Industrial OT/SCADA Security — Expertise in IEC 62443 and TS 50701 applied to railway, industrial, and critical environments. Drafting of Cybersecurity Assurance Plans, responding to tenders, training field technical teams.

Part-time CISO — Managing your security mission without the constraints of recruitment: strategic plan, dashboards, incident management, BCP/DRP, NIS2/DORA/RGS compliance, coordination with your teams and service providers.

My differentiating asset: I speak equally to your technical teams and your senior management. I translate cyber risks into concrete, understandable, and measurable business issues.

Based in Lyon — missions in France and internationally.

Languages

English
Native or bilingual
German
Basic
Spanish
Basic
Japanese
Basic

Workplace preferences

Can work on-site

Paris (up to 50km)

Colas Rail
Industrial Cybersecurity Manager for Projects and Tenders
TRANSPORTATION
March 2024 - March 2026 (2 years)
Courbevoie, France
Cybersecurity manager in the railway sector (metro/tram/train) for French and global projects. Design Authority on projects by enforcing client cybersecurity requirements. Analysis and response to tenders and calls for projects. Financial quantification of security measures to be implemented and expert resources. Performing or managing risk analyses using EBIOS RM, NIST CSF 2.0, IEC 62443. Drafting Cybersecurity Assurance Plans. Training and awareness on OT cyber risks for technical teams, subcontractors, and co-contractors. Working in an international environment with travel to Asia and Africa for project needs.
Project Management, IEC 62443, Asia, Africa OT Security ICS Industry Railway
MilaCybersecurite
Director
DIGITAL AND IT
June 2023 - Today (3 years and 2 months)
Lyon, France
For about ten clients in Europe: Responding to client tenders, commercial presentations, demos and POCs, Performing Business Impact Analyses, risk analyses, strategic and cyber master plans, business recovery and continuity plans, crisis management teams, IT penetration tests and industrial (OT/Scada) penetration tests, IT and OT architecture reviews. Information security awareness solutions in the form of episodes and campaigns, in-person training sessions with groups of up to 25 people. 24/7 Open Source SIEM and SOC solutions. Drafting PSSI and cybersecurity policies.
SopraSteria
Deputy Security Director
January 2022 - January 2024 (2 years)
Within the cyber transformation program of the Security Department, responsible for the Business Continuity Management program for the France Division (14,000 people) and the strategic security dashboard project for the Group's CISOs and Division Security Managers. Participation in subjects handled by the Design Authority (Vulnerability Management, Asset Management, Cloud security, security monitoring, BCM, security dashboards, SBOM, network security, endpoint security, security guidelines, data protection, compliance management platform).