Freelancer profile translated to English.

Description

Charles, a Consultant with 9 years of experience in cybersecurity and a solid expertise in Risk and Compliance Management (GRC). I am passionate with an ambition to continue being a key player in protecting data and IT systems, bringing real added value by helping companies strengthen their IT security, comply with ever-evolving regulations, and minimize digital threats.

Languages

French
Native or bilingual
English
Conversational

Workplace preferences

Can work on-site

Paris (up to 50km)

Institut National de l'Audiovisuel
Cybersecurity Consultant
FILM AND AV
December 2022 - June 2023 (7 months)
Bry-sur-Marne, France
Assist management in integrating security into projects

• Conduct Business Impact Analysis (BIA)
Help business units define IT project data and information needs.
• Perform risk analyses
Utilize tools (Information Security Framework, validated methodologies) for identifying, assessing, and mitigating project-related risks.
• Assist with information security compliance and regulations
Understand regulations, assess compliance, and develop policies and procedures applicable to the institute.
• Monitor the implementation of information security recommendations
Implement regular monitoring and audit mechanisms to ensure policies and procedures are followed and to identify areas for improvement.
• Raise user awareness
Educate employees on security best practices.
Risk Analysis IS Governance Cybersecurity Awareness
bnpparibas
Cybersecurity Consultant
BANKING AND INSURANCE
April 2021 - November 2022 (1 year and 7 months)
Montreuil, France
Ensure the security of information and systems, making sure the security policy is considered and applied at each stage of the projects.

• Security Needs Assessment
Collaborate with project teams to understand security requirements
• Secure Design
Work on designing secure solutions, considering security best practices, applicable regulations, and standards.
• Risk Assessment
Regularly assess project-related risks and recommend mitigation measures to reduce these risks.
• Security Watch
Monitor the evolution of threats and vulnerabilities that could affect the organization's information system.
• Incident Management
Coordinate response, resolution, and appropriate communication for incidents.
• Monitoring and Continuous Improvement
Ensure security measures are continuously evaluated and improved to adapt to evolving threats and technologies.
Audit Compliance IS Governance Cybersecurity
Carrefour
Auditor
BANKING AND INSURANCE
March 2021 - April 2021 (1 month)
Belgium, United States
Conducted an audit for ISO 27001 certification preparation for two entities of Carrefour Belgium

• Audit Planning
Develop audit plans by identifying areas to be audited, objectives, audit methods, and necessary resources.
• Data Collection
Gather relevant information on the organization's processes, policies, activities, and controls through interviews and document reviews.
• Compliance Assessment
Verify that the organization complies with internal and external regulations, standards, and policies.
• Risk Assessment
Assess risk management by identifying risks, evaluating mitigation controls, and recommending corrective actions if necessary.
• Audit Reporting
Write audit reports describing findings, conclusions, recommendations, and potential improvements.
• Communication of Results
Communicate audit results to stakeholders.
Security Audit Cybersecurity