Freelancer profile translated to English.

Description

Are you looking to strengthen your ISO 27001 compliance or structure the security of your information system?

I am a Junior GRC ISO 27001 Consultant, specializing in governance, risk management, and compliance. I support companies (SMEs, startups, consulting firms) in setting up an Information Security Management System (ISMS) and preparing for certification.

What I bring to you:

Drafting and implementation of security policies (ISSP, charters, procedures)

Conducting risk analyses (ISO 27005, EBIOS RM)

Evaluating the maturity and compliance of your organization with ISO 27001

Supporting the awareness of teams to cybersecurity

Monitoring and corrective action plans for your internal/external audits

Frequent deliverables: ISSP, risk register, internal audit reports, risk treatment plan, ISO 27001 compliance tables.

My goal is clear: to help you structure your information security, reduce your risks, and succeed in your ISO 27001 compliance efforts.

Languages

French
Native or bilingual
English
Conversational

Workplace preferences

Remote only

Primarily works remotely

OG IT CONSULTING
INTERN IN GOVERNANCE, RISK AND COMPLIANCE/ ISO 27001
INTERNET OF THINGS (IOT)
April 2025 - Today (1 year and 2 months)
Hybrideweg, Vijfhuizen, NH, Netherlands
Drafting of the security policy
Risk analysis with the EBIOS RM method
Drafting and verification of deliverables for companies' compliance with the ISO 27001 standard
Implementation of an Information Security Management System
Verification of company assets
Employee awareness
EBIOS RM ISMS ISO 27001 ISSP Technological monitoring
HI TECH INFORMATIQUE Lomé
INTERN Technician deployment of solutions
May 2024 - February 2025 (9 months)
Lomé, Togo
Deployment of the Wallix Bastion solution to the general post office and the autonomous port of Lomé
Assistance for interventions on fortigate and Bitdefender solutions
M-KIS TOGO Lomé
INTERN Junior Pentester
February 2023 - June 2023 (4 months)
Togo
Performing vulnerability tests (scans, reconnaissance), writing audit reports, raising security awareness.