Ayoub B.

Context:

Managed the cybersecurity and IT resilience governance framework for 12 subsidiaries: maturity assessment, continuous improvement plan supervision, and deployment of over 30 critical remediation plans.

Assignments:

▪ Supported IT Risk Officers and IT teams in the operational implementation of IT and cyber security requirements within a transformation program

▪ Deployed and improved cybersecurity governance processes (ISO 27001, NIST, DORA)

▪ Structured and managed the IT Risk Management Framework (ISO 27005)

▪ Contributed to the definition, deployment, and monitoring of IT controls

▪ Managed remediation plans and tracked their progress

▪ Organized and led monthly progress meetings with entities

▪ Implemented indicators (KPI/KRI) and produced consolidated reports

▪ Contributed to summaries for management, the Group CISO, and the second line of defense

▪ Coordinated stakeholders (CISO, CIO, Risk Managers, IT teams)

▪ Participated in regulatory compliance and critical risk reduction efforts

Results:

▪ Harmonized security practices across 12 subsidiaries

▪ Deployed over 30 critical remediation plans

▪ Improved visibility and management of IT risks at the Group level

▪ Significantly reduced major vulnerabilities

Context:

Strengthened the IT and Cyber risk management system within La Banque Postale's IT department: risk assessment and monitoring, implementation of key risk indicators (KRI), management of remediation plans, and reporting to governance committees.

Assignments:

▪ Supported IT teams in implementing IT and cyber risk management processes

▪ Conducted EBIOS RM risk analyses (scenario identification, risk assessment)

▪ Assessed the effectiveness of existing IT controls, identified areas for improvement, and contributed to the deployment of new controls

▪ Monitored action and remediation plans (IT teams, CISO, SOC) and implemented risk indicators (KRI)

▪ Organized and led IT and Cyber risk monitoring committees, produced reports and summaries for management and governance bodies

▪ Contributed to permanent control and regulatory compliance mechanisms

Results:

▪ Strengthened the IT and Cyber risk management system

▪ Improved monitoring of remediation plans and risk indicators

▪ Better coordination between IT, security, and risk teams

▪ Structured reporting and improved management visibility

Supported a digital transformation program with significant organizational and IT implications within the Digital and Cyber Transformation department of a public administration.

Overall program coordination (roadmap, milestones, risks, dependencies)

Action plan monitoring and project risk management

Participation in project governance and leading steering committees

Production of monitoring reports and deliverables

Contribution to structuring IT management systems

Improved overall program management and project risk visibility, with sustainable structuring of governance processes.