Denis Petit

Strategy, Governance, and Risk

• Definition and execution of a comprehensive cybersecurity strategy aligned with business objectives, risk appetite, and regulatory requirements.
• Establishment and management of a complete security governance framework (policies, standards, decision-making principles, risk acceptance workflows).
• Management of the company's cyber risk management program: risk register, assessments, mitigation strategies.
• Definition and monitoring of key indicators (KPI/KRI) and decision-making reporting on risk posture, program progress, and investment needs.

Security Engineering and Operations

• Technical reference for architecture and engineering: integration of Security-by-Design and Privacy-by-Design in the SDLC, identity management, and data protection.
• Supervision of the operational ecosystem, including incident response and crisis management.
• Integration of security into projects, change management, and engineering workflows.

Compliance and Audit

• Leadership of compliance programs (ISO 27001, SOC 2 Type II, BSI C5), including design, certification audits, and continuous monitoring.
• Translation of regulatory requirements and frameworks into measurable controls.
• Coordination of security testing and remediation tracking.
• Maintenance of security documentation and compliance records.

Leadership, Business Enablement, and Culture

• Creation, development, and leadership of an international security team, including recruitment, mentoring, and organizational sizing.
• Cross-functional collaboration to align security with product and business objectives.
• Development of internal awareness and training programs.
• Communication: translating security challenges into strategic narratives for management.

• Role with a strong operational component, combining technical expertise and strategic management of security issues.
• Management of compliance measures related to media protection, including conducting security audits according to MPAA standards for distribution to major studios (before TPN structuring).
• Support for the digital transformation of the sector, with responsibility for the Security domain during the shift from a film-based industry to digital infrastructures.
• Design and security of complex network architectures covering heterogeneous environments (post-production, offices, VR immersive experiences), including the implementation of control and segmentation mechanisms (proxy).
• Definition and deployment of physical security strategies adapted to sensitive and high-value data centers and sites (laboratories, storage, immersive installations).
• Integration of regulatory requirements for personal data protection (GDPR), from impact analysis to their implementation in internal and client services.
• Management of the IT department and its resources during growth from 20 to 100 employees.

• Development, creation, deployment, and support of a client infrastructure for the deployment of digital cinema across Western Europe (1000 servers).
• Project management for the deployment of this infrastructure for the MK2 and UGC groups (60 sites).
• Management of the IT department and its resources during growth from 20 to 100 employees.