Eric L

I am first and foremost an Information Security Manager (RSSI) - Chief Information Security Officer (CISO) and a cybersecurity expert with over 25 years of experience, before being a consultant. Having held very operational roles (including IT production director in a bank), I ensure that I always remain practical and never theoretical. I carry out all types of projects: security policy (PSSI), Cybersecurity roadmap, awareness program, risk analysis, compliance (DORA, NIS2, PCI DSS, etc.), regulatory watch notes, etc. I support CISOs in taking up their role or developing their activity: identification of priorities, construction of the multi-year roadmap, definition or update of the Information Security Policy, management of security integration support in products and projects (ISP - agile if applicable), construction of the SSI audit plan, awareness plan, Security Assurance Plan (PAS), dashboards (operational, strategic, ...), etc. I also provide interim CISO (while awaiting recruitment) or part-time CISO services. Furthermore, I carry out all types of security audits (governance), compliance audits (ISO 27001 or others) and I have experience in setting up subcontractor audit mechanisms (TPRM) according to DORA and/or GDPR. Finally, I specialize in Cyber governance (particularly in national or international multi-entity contexts), audit/control, and compliance (DORA, GDPR, NIS2, PCI DSS, etc.). Experience across all sectors: industry, software publishing, banking, insurance, services, ... and all sizes of organizations, from startups to international groups. Fixed-price services are preferred; the indicated indicative daily rate is reserved for VSEs (<10 employees) and associations. English spoken fluently.