You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Cyril GhattasCG

Cyril Ghattas

Outsourced CIO / CISO | IT Transformation

€1,100/day
Paris, FR
15+ years

Average response time: 1 hour

Freelancer profile translated to English.
Back to original language

About Cyril

Looking for an operational leader to take over, structure, or secure an IT department, service center, or strategic entity?
I act as an outsourced CIO / CISO or the right-hand person to the CIO / CISO to ensure the governance, compliance, and performance of your information system.

What I bring:

- Strategic vision to structure or transform the IT department (governance, processes, cloud, security)
- Rigorous management of IT, cybersecurity, and compliance programs (ISO 27001, 27005, IEC 62443, LPM, NIS2)
- Operational execution: scoping, budgeting, internal/external coordination, executive committee reporting
- Results-oriented culture: measurable improvement, risk reduction, regulatory alignment
- Ability to mobilize teams and partners around performance, compliance, and innovation objectives

Types of projects:

- IS Transformation & Security
- IT & Cybersecurity Governance
- IT Department Structuring
- Restructuring of troubled programs
- Management of strategic portfolios
- Interim CIO / Head of Transformation missions

Service offerings:

1°) Department / Service Center Management (fixed price) – 360° Diagnosis, roadmap, KPI/SLA → controlled entity.
2°) Outsourced CIO / CISO (fixed price) – ISO 27001/NIS2 Compliance, defense plan, Security Maintenance → strengthened cyber posture.
3°) CIO's Right-hand (fixed price) – Executive PMO, arbitration, budget → accelerated programs, reliable delivery.

Interim management : CIO, IT Director, CISO, CSO, Head of IT, Transition Manager.
Sectors : Industry • Energy • Banking • Insurance • Health • Software • Services • Public • Defense.
Keywords : digital transformation, IT governance, interim management, IS strategy, operational performance.

Indicative daily rate depending on the nature of the mandate (fixed price, shared management, short or long-term mission).
  • French

    Native or bilingual

Can work on-site
Paris (up to 50km), Lyon (up to 50km), Montpellier (up to 50km), Nice (up to 50km), Marseille (up to 50km)

Experience

  • Confidentiel
    Director
    ENERGY AND UTILITIES
    January 2024 - Today (2 years and 5 months)
    Paris, France
    Objective : Restructuring of a critical industrial IT environment to meet regulatory compliance, governance, and IS security requirements.

    Strategic Achievements :

    Management of the restructuring of a critical environment to ensure regulatory compliance and consistency with the group's security policy.

    Definition and management of a strategic project portfolio: cybersecurity, governance, compliance, crisis management, security maintenance.

    Coordination of transformation between business departments, technical partners, and governance bodies.

    Supervision of internal and external resources, CAPEX/OPEX budget management, and performance indicator monitoring.

    Implementation of crisis governance and regulatory security processes integrated into operations.

    Strengthening of cyber posture through the implementation of access controls, frameworks & architecture, security maintenance, and code security.

    IAM, PAM DCIM, CMDB, asset management, Security Maintenance, and code security.

    Results:
    Significant improvement in regulatory compliance, stabilization of critical environments, and establishment of sustainable security governance.


    Environments : Regulatory compliance, defense plan, business continuity, critical infrastructure, operational governance, ISO 27001 / 27002 / 27005 / 27034 / 62443 / 15408 / NIST / CIS / OWASP/ ANSSI / LPM / NIS, ITIL,
    IEC 62443 Transformation Regulatory Compliance Program Management Cybersecurity Governance
  • FIDAL
    Interim Manager / Program Director
    CONSULTING AND AUDITS
    November 2019 - August 2023 (3 years and 10 months)
    Courbevoie, France
    Objective:Complete overhaul of the IT department function and migration to the cloud (Azure, Office 365) in a multi-site context (92 sites, 2500 employees).

    Major Achievements:

    Definition of the IT strategic vision and transformation roadmap (cloud, security, ITSM, governance).
    Agile management of infrastructure and application migration to Azure and M365 (IAM, SSO, PKI, Exchange, SharePoint, Teams).
    Implementation of comprehensive ITIL governance: project, budget, risk, security, incident, release, change management, CMDB, asset management.
    Selection and deployment of an ITSM solution (POC, negotiation, contract, integration, L1-L3 training, change management).
    Supervision of ongoing maintenance and support, application version upgrades, and operational security.
    Complete budget management (CAPEX/OPEX), project costing and monitoring, cost optimization, and supplier portfolio rationalization.
    Conducting internal audits and contributing to the ISSP, DAT, DEX, PV, acceptance testing, ISO 27001 / 27002 / 27005 / 22301 / 31000 compliance.
    Management of internal and external teams, coordination of service providers and strategic partners.

    Results:

    60% of business applications migrated to the cloud.
    25% reduction in infrastructure costs.
    New Windows 11 & M365 Online workstation deployed.
    Reorganized IT department into a high-performing service center.

    Environments : Azure, Office 365, ServiceNow, EasyVista, JIRA, ITIL, CMDB, PKI, SDWAN, NIS, ISO 27001/27002/27005, ISO 22301, ISO 31000, IAM, Document Management, Electronic Signature and Invoicing.
    Management Program Management IT Director ISSP ITIL
  • Crédit Agricole SA
    Digital Banking Director
    BANKING AND INSURANCE
    February 2016 - October 2019 (3 years and 9 months)
    Paris, France
    Objective:Management of two strategic customer journey digitalization programs (“onboarding via tablet” and “via web channel”) deployed across the Group's 39 regional banks.

    Major Achievements:

    Global and strategic management of the online banking platform's digital transformation.
    Redesign of the functional architecture to improve performance, security, and user experience.
    Definition and monitoring of performance indicators (KPIs) and management dashboards.
    Complete functional scoping: needs analysis, use cases, user journeys, functional specifications.
    Facilitation of steering committees, monitoring, and decision-making with the Executive Committee, Management Committee, and Project Committee.
    Supervision of functional testing, user acceptance testing, and production deployments.
    Budget management and resource allocation with cost and timeline optimization.
    Proactive risk management and regulatory compliance (ISO 27005 approach).
    Evaluation of electronic signature, strong authentication (OTP, SMS), and contract package solutions.
    Preparation of architecture, operational, and training materials for users and the IT department.
    Agile coaching for departments and project teams to accelerate cultural transformation.

    Results:

    Successful deployment of “onboarding” solutions in the 39 regional banks, covering over 7,000 branches.
    Significant improvement in commercial efficiency and customer journey fluidity.

    Environments: Agile / Agile Testing, Document Management, Electronic Signature, OTP SMS, Strong Authentication, Payment Methods, Mobility, Android, Java, .NET, IBM Jazz, Tablet & Mobile, EAI, FATCA, ISO 27000 to 27005.
    Governance IS Architecture Risk Management Digital Transformation Cybersecurity

Recommendations

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • Engineer
    ESIEA
    2009
  • MBA Business Management
    Sorbonne Panthéon
    2018

Certifications

  • SAFe leading 5
    SAFe leading 5
  • devOps foundation
    devOps foundation

Skill set (30)

Categories