Freelancer profile translated to English.

Description

Hello !

With over 5 years of consulting experience with multiple clients, I now bring my expertise to your company.

My areas of expertise cover Governance, Risk and Compliance (GRC), Data Security and Resilience.

Certified ISO27001 Lead Implementer and CISSP, I am your ideal partner for robust security. Operating in international environments, English is a major asset for our collaborations.

My expertise🎯

GRC🛡️: I develop relevant risk analyses, ensure security monitoring in your projects, conduct in-depth analysis of your suppliers, and build comprehensive and effective cyber strategies.

Resilience💪: Business continuity expert, I have designed and led 3 crisis exercises. I also write and deploy IT Business Continuity Plans (BCP) and IT Disaster Recovery Plans (DRP) to ensure your rapid recovery in case of an incident.

Data Protection🔒: Expertise in deploying anonymization, encryption, data classification, and DLP solutions. GDPR compliance expert.

Industry field of expertise

Languages

English
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

L'OREAL TRAVEL RETAIL
ASSISTANT CISO
LUXURY GOODS
January 2025 - Today (1 year and 5 months)
Paris, France
Mission
- Support the Chief Information Security Officer (CISO) in defining and implementing cybersecurity strategies for global operations
- Focus on risk management, compliance, and customer data protection. Result
Implementation at the beginning of the year of a monitoring dashboard integrating key performance indicators (vulnerabilities, incidents, compliance, awareness)
Drafting risk analyses and monitoring security controls for about a hundred applications in scope
Monitoring the compliance of 400 suppliers through an evolving security questionnaire based on security tiering
TPRM GRC Risk Analysis CISSP Cybersecurity Governance
L'Oréal SA - L'Oréal France
ASSISTANT CISO
FASHION AND COSMETICS
January 2024 - December 2024 (11 months)
Paris, France
Mission
- Support in defining a group-wide cyber program (€10M+) - priorities, trade-offs, communication to top management
- Definition of roadmaps and facilitation of steering committees.
-Collaboration with 3 CISOs, liaison with project managers; key areas: Secure Foundations, OT security, and retail network protection.
- In a nutshell: OT & Retail security; PAM CyberArk, CSPM Cloud, Patch Management, Tanium, Active Directory, CWPP
CSPM Active Directory Assistant CISO Cybersecurity Governance CISSP
Keolis SA
RESILIENCE CRISIS EXERCISE
TRANSPORTATION
September 2023 - December 2023 (3 months)
Bordeaux, France
Mission
- The mission is divided into 3 main parts:
Documentation writing: an IT continuity plan and IT disaster recovery plans
Implementation of a crisis exercise and crisis training
Creation of security indicators

Result
- BCP/DRP:
Definition of an IT continuity plan around 3 scenarios (destruction of the primary site, power outage, and cyber attack)
Creation of 8 disaster recovery plans for critical company assets
- Crisis exercise:
Provision of a crisis kit containing the crisis management plan, a logbook, and quick reference guides
1 half-day awareness workshop on crisis management
1 3-hour crisis exercise (+40 stimuli) involving a crisis management team of about ten people
Provision of a lessons learned report on the crisis exercise
- Indicators
Provision of about thirty cyber indicators
Integration of indicators in PowerBI
Crisis Exercise BCP DRP Resilience BCP/DRP