Freelancer profile translated to English.
Back to original languageAbout Ayoub
Experienced Cybersecurity Consultant, specializing in SecOps, incident management, security governance, and regulatory compliance (LPM, NIS2, continuous monitoring). With solid experience in major groups such as AXA, L'Oréal, and Crédit Agricole, I focus on Security by Design integration, deployment of advanced protection tools, forensic analysis, and strategic project management aimed at sustainably strengthening organizations' cyber posture.
Curious, rigorous, and results-oriented, I excel in structuring security processes, coordinating multidisciplinary teams, and implementing large-scale operational controls.
Motivated by challenges, I enjoy transforming complex environments into reliable, measurable, and high-performing security systems.
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km)
Experience
- AXA GIEOperational Security ManagerSeptember 2021 - September 2025 (4 years)Paris, FranceGlobal management and oversight of the MTSB project to ensure a minimum security level across AXA's entire asset base (workstations, Windows/Linux servers, databases, business applications, and mobile devices).Coordination of technical and security teams (SOC, IT Infrastructure, Cloud, Networks, Endpoints) to ensure asset compliance with MTSB requirements.Supervision and monitoring of security controls defined by the baseline: patch management, secure configuration, encryption, antivirus, EDR, system hardening, account and access management.Development and monitoring of annual compliance objectives for each perimeter (Workstations, Servers, Databases, Mobiles, Linux).Implementation of regular control monitoring through consolidated reports and quarterly reporting to security management and local entities.Calculation and analysis of manual KPIs for each control (compliance rate, asset coverage, number of pending remediations, quarterly evolution).Identification of gaps and associated action plans to improve overall compliance and reduce residual risk.Communication and awareness-raising for local teams on program requirements and support in implementing remediation plans.Direct contribution to the continuous improvement of GIE AXA's security posture through a cross-functional view of controls and risks.
- L'Oréal – Sécurité dans les projetsSecurity Project Analyst (ISP)January 2021 - July 2021 (6 months)Paris, FranceSupport for business and IT teams in implementing the security process throughout the project lifecycle (from design to production).Participation in security tenders: drafting requirements, analyzing supplier proposals, and managing compliance audits (internal and external).Vulnerability management for application and infrastructure projects, coordination with technical teams for remediation and patch tracking.Conducting project risk analyses according to group standards and ISO 27005 / EBIOS frameworks, with definition and monitoring of associated action plans.Contribution to security governance through dashboard production, monthly reporting, and support for security management.Close collaboration with Infrastructure, Cloud, Network, and Compliance teams to ensure consistency of security requirements across the entire project portfolio.Raising awareness among project managers and application owners on cybersecurity best practices and internal compliance requirements.
- Crédit Agricole – Cyber CheckUpSecurity Analyst – Internal Audit TeamOctober 2020 - December 2020 (2 months)• Monitoring and analysis of security indicators for the group's various subsidiaries as part of the CyberCheck-UP campaign (compliance, maturity, risk exposure).• Facilitation of coordination workshops with local security managers (CISOs, internal auditors, IT teams) to gather information, clarify requirements, and assist entities in understanding controls.• Creation of consolidated dashboards (KPIs, compliance rates, gaps per subsidiary, critical control summaries) providing security management with a comprehensive and up-to-date view.• Synthesis and analysis of deliverables submitted by subsidiaries: validation of evidence, identification of gaps, improvement recommendations, and prioritization of actions.• Contribution to the continuous monitoring process improvement by ensuring the consistency, quality, and traceability of collected data.• Development of summary reports for security management, facilitating campaign oversight and strategic decision-making.• Vulnerability management for application and infrastructure projects, coordination with technical teams for remediation and patch tracking.
Recommendations
Be the first to recommend Ayoub
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- State Engineer in Networks and TelecommunicationsEcole Mohammadia D'Ingénieurs2018Ingénieur d'Etat
- CPGE – PSSI/PSILycée Moulay Youssef2015CPGE – PSSI/PSI