Freelancer profile translated to English.

Description

As a CISO and Head of Governance, I had the opportunity to collaborate with multidisciplinary teams – IT, security, scientists, support functions (Finance, HR, etc.) – all driven by a quest for excellence.

Over the years, I have led the implementation of a global, structured, and scalable Information Security Management System (ISMS). This work was accompanied by a progressive overhaul of our processes, the identification of areas for improvement, and the implementation of significant changes.

In parallel with these structural transformations, I conducted large-scale awareness campaigns to strengthen the security culture within the company and better protect us against internal and external threats.

I also worked closely with members of the executive committee, providing relevant analyses and leading company-wide presentations on key topics, including best practices and the code of conduct.

Finally, I ensured compliance with SOX (Sarbanes-Oxley) regulations by preparing and leading technical audits conducted by external firms such as KPMG and Deloitte.

Languages

English
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

ITEOS THERAPEUTICS
HEAD OF INFORMATION SYSTEMS SECURITY
BIOTECH
January 2022 - Today (4 years and 5 months)
Charleroi, HT, Belgium
Definition of a multi-year cybersecurity roadmap and monitoring of implementation;
Provision of strategic analyses to management, facilitating data-driven decision-making in a regulated environment;
Creation and updating of a clear and functional ISMS, including security policies, risk management (assessment and register), and operational documentation;
Monitoring the implementation of regulatory requirements, specification and coordination of technical and organizational security audits and reviews (SOX & NIS2);
Promotion and communication of cybersecurity to all teams via awareness campaigns (10 campaigns per year, 16 individual sessions in 2025), reducing the failure rate in the event of a phishing attack;
Creation of the security incident management process (Business Continuity Plan for IT and laboratories);
Management of the crisis unit for major incidents, with regular simulation exercises ("tabletop") - 3 exercises in 2024/2025;
Implementation of physical protection of company premises to secure all assets (including offices and laboratories);
Definition and implementation of third-party management processes (suppliers, partners, etc.)
Approach Belgium
GOVERNANCE CONSULTANT
CONSULTING AND AUDITS
January 2020 - January 2022 (2 years)
Louvain-la-Neuve, BW, Belgium
Supporting clients for ISO27001 certification - companies of various sizes and sectors;
Creation and implementation of a comprehensive awareness plan for cybersecurity issues;
Creation of an ISMS model that can be deployed according to clients, adapting to different needs;
“CISO as a Service” for clients who have been ISO27001 certified.
CGI Business Consulting
PROJECT MANAGEMENT CONSULTANT
CONSULTING AND AUDITS
June 2017 - November 2019 (2 years and 5 months)
Paris, France
Change management and deployment of various IT modernization projects
Support for the Ministry of the Armed Forces (General Staff, General Secretariat, DGA, etc.)