Ayoub El Ouadi

🎯 Global Patch Management — Risk Reduction

🛠️ Strategic Oversight & Operational Coordination

▪ Leadership of global patch management within the AXA GIE CSO team, focusing on critical IT infrastructure vulnerabilities

▪ Orchestration of the remediation cycle: Windows, macOS, servers, and VMs (Windows, Linux, Citrix)

▪ Deployment strategy based on vulnerability criticality and residual risk exposure

▪ Cross-functional coordination with Infrastructure, Cloud, Operations, and Support for a controlled rollout

▪ Validation of patch cycles (test → pilot → generalization) to minimize production impacts

📊 Dashboards & Decision Support

▪ Strategic KPIs: open/resolved vulnerabilities, coverage rate by asset family, average remediation time

▪ Real-time dashboard of the infrastructure's security posture against critical risks

▪ Reporting on campaign progress and compliance deviations

▪ Escalation of non-compliant or exempted assets, with coordination of action plans

▪ Executive program oversight: decision-making and communication to security governance committees

🎯 Incident Management, Security Project Oversight, and Continuous Control Improvement

🛡️ MTSB (Minimum Technical Security Baseline) v2 & v3

▪ Global project management of MTSB ensuring a minimum security level across the AXA infrastructure: workstations, Windows/Linux servers, databases, business applications, mobile devices

▪ Coordination of SOC, IT Infrastructure, Cloud, Networks, and Endpoints teams for compliance

▪ Control supervision: patching, secure configuration, encryption, antivirus, EDR, hardening, account and access management

▪ KPIs per control, action plans, and quarterly reporting

🚨 Incident Management and Investigations

▪ Real-time alert monitoring (SIEM, DLP, EDR)

▪ Analysis of Digital Guardian (DLP) and Cybereason (EDR) reports to identify threats and abnormal behaviors

▪ Escalation with SOC, IT, and business units; drafting incident communications (report, post-mortem, recommendations)

🔍 Cybereason EDR Integration and Management

▪ Project lead for the global integration and deployment of Cybereason EDR within AXA GIE (workstations, Windows and Linux servers)

▪ Prioritization of detection use cases with SOC and Threat Intelligence, definition of EDR operational processes

▪ Monitoring of agent rollout and KPIs: coverage, detection quality, responsiveness

🔒 DLP Policies

▪ Implementation, configuration, and administration of DLP policies in Digital Guardian

▪ Continuous improvement of rules to reduce alert noise

▪ Policies reducing data leakage risks (GDPR, ISO 27001)

📝 Requests and Exemptions

▪ Processing requests: specific tools, privilege escalation, exceptional access, DLP/EDR exemptions

▪ Compliance assessment against AXA Group policies

▪ Daily ServiceNow use; KPIs (SLA, rejection rate, average time)

🎯 Integrating Security into Projects and Supporting Business/IT Teams

🔐 Integrating Security into Projects

▪ Supporting business and IT teams in implementing the security process throughout the project lifecycle (from design to production)

▪ Participation in security tenders: drafting requirements, analyzing supplier proposals, and managing compliance audits (internal and external)

▪ Vulnerability management for application and infrastructure projects, coordination with technical teams for remediation and patch tracking

▪ Conducting project risk analyses according to group standards and ISO 27005 / EBIOS frameworks, with definition and follow-up of associated action plans

📊 Governance & Collaboration

▪ Contribution to security governance through dashboard production, monthly reporting, and support for security management oversight

▪ Close collaboration with Infrastructure, Cloud, Network, and Compliance teams to ensure consistency of security requirements across the project portfolio

▪ Raising awareness among project managers and application owners on cybersecurity best practices and internal compliance requirements