Breixo Ganaël Gonzalez Noël

Integrated into a developing GRC team (manager arrived 2 weeks before me), I operated with full autonomy on a strategic scope for the group.

In 6 weeks, I conducted the complete assessment of 26 IT/OT port terminals and qualified 414 findings (governance & technical). I built from scratch a business prioritization framework (Cost / Effort / Time — Low/Medium/High) to transform audit data into an actionable roadmap for Top Management.

I then steered the action plan for 222 findings: regular exchanges with the relevant CISOs, monitoring of remediations, closing approximately 50 findings beyond set objectives. Monthly KPI reporting to the Group CISO, who reports directly to the CEO.

Member of the team commissioning the annual group audits — access to strategic reports within a restricted scope.

Strategic assessment of IS compliance with NATO and OCCAR requirements on large-scale international critical infrastructures.

Multi-standard gap analysis and creation of a common documentation framework. Identification of non-conformities and definition of the remediation strategy. Facilitation of workshops with business departments (Data, HR, IT) to find solutions adapted to field constraints.

• Installation and supervision of XDR Trend Micro Vision ONE internally and for clients

• Proactive proposals and cybersecurity consulting

• Facilitator of continuous improvement meetings

• Currently preparing:

- Hardening (OS, O365…)

- General IS audits against basic security rules

- Corporate awareness sessions (passwords, anti-phishing, best practices…)

- Pre-sales