Freelancer profile translated to English.

Description

With a solid background in cybersecurity, I specialize in Governance, Risk, and Compliance (GRC). I have supported several major clients, particularly in the telecommunications, public, and retail sectors, on issues such as risk analysis (EBIOS RM), implementation of business continuity plans (BCP/DRP), ISO 27001 compliance, and integration of security into business projects and internal audits.

My approach is both operational and strategic: I focus on aligning security requirements with business objectives while ensuring effective stakeholder awareness.

Today, I leverage my expertise to assist organizations looking to strengthen their cyber posture, improve their resilience, and meet new regulatory requirements such as ISO27001, NIS2, or GDPR.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

Barma Solutions France,
Networks and Cybersecurity Engineer
DIGITAL AND IT
February 2024 - Today (2 years and 4 months)
92100 Boulogne-Billancourt, France
• Structuring of the ISMS according to ISO/IEC 27001 standard for a connected time clock project, including the drafting of governance documents.
• Drafting of the Information Security Policy (ISP): Definition of objectives, commitments, scope, and responsibilities, and drafting of the document corpus.
• Development of the security user charter for stakeholders, to frame the use of the information system and raise awareness of best practices.
• Production of the Risk Treatment Plan and the Statement of Applicability (SoA)
Document Corpus
Barma Solutions
GRC Cybersecurity Engineer | Internal Project
DIGITAL AND IT
January 2025 - Today (1 year and 5 months)
Boulogne-Billancourt, France
• Structuring of the ISMS according to ISO/IEC 27001 standard for a connected time clock project, including the drafting of governance documents.
• Drafting of the Information Security Policy (ISP): Definition of objectives, commitments, scope, and responsibilities, and drafting of the document corpus.
• Development of the security user charter for stakeholders, to frame the use of the information system and raise awareness of best practices.
• Production of the Risk Treatment Plan and the Statement of Applicability (SoA)
Barma S.
Cybersecurity Analyst Consultant
May 2024 - December 2024 (7 months)
Lille, France
• Conducting EBIOS RM risk analyses for strategic projects.
• Conducting Business Impact Analysis (BIA).
• Support for cyber resilience and implementation of Disaster Recovery Plans (DRP).
• Facilitating workshops to audit platforms and products.
• Evaluating supplier cyber maturity for compliance with security requirements.
• Processing and reducing vulnerabilities in applications (GitHub scans).
• GCP, Microsoft Azure cloud environment