Freelancer profile translated to English.
Back to original languageAbout Freddy
GRC Cybersecurity Consultant | CISSP | ISO 27001 Lead Implementer
Graduated engineer with a specialized Master's degree in cybersecurity from CentraleSupélec, I leverage my years of experience to support companies in securing their information systems, risk management, and regulatory compliance (ISO 27001, PCI-CP, GDPR, DORA, EBA).
I work on high-stakes strategic missions, ranging from IT audits to defining cybersecurity roadmaps, managing remediation plans, and designing BCP/DRP. My background has allowed me to work for major clients such as EssilorLuxottica, La Banque Postale, Crédit Agricole CIB, EDF, CNAM, in France and internationally.
My areas of expertise:
- Cybersecurity Governance & Risk Management (EBIOS RM, NIST CSF)
- ISO 27001 / GDPR / DORA / SIM3 Compliance
- Security Audits, BCP/DRP,
- Awareness, strategic support, and change management
- Deployment of Power BI dashboards and cyber reporting
Available for cybersecurity consulting, audit, or project management missions.
Based in Paris – On-site or remote missions.
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km)
Experience
- EssilorLuxotticaCybersecurity Project ManagerLUXURY GOODSAugust 2024 - Today (1 year and 10 months)Paris, France
- Monitoring of remediation following vulnerabilities discovered during audits in North America, and deployment of MFA on VPNs for group entities worldwide.
- Implementation of global KPIs covering GSOC, IAM, and patch management.
- Drafting thematic procedures.
- La Banque Postale Groupe - SiègeIT InspectorPUBLIC SECTORJanuary 2024 - August 2024 (7 months)Paris, France
- Audit of the business continuity plan and hosting strategy for the bank: Audit of BCP roles and responsibilities and hosting strategy, BCP requirements with service providers and their management, BCP testing campaigns; Compliance of the 3 previous investigation areas with the European Banking Authority (EBA) guidelines and DORA.
- Audit of a card manufacturing and personalization service provider on behalf of the General Inspectorate Committee: – Audit of change management as part of IT production; – Gap analysis of contractual requirements with PCI-CP standard, then verification of the operational application of these requirements.
- Drafting test grids and audit opinion reports.
- Sopra SteriaCybersecurity Consultant - Prevent StrategyCONSULTING AND AUDITSApril 2022 - December 2022 (8 months)Paris, France
- Crédit Agricole CIB - Security Audit – Management of the security audit roadmap for critical applications and those subject to banking regulations. Coordination of audits in France and internationally. – Presentation of audit reports to business units. – Reporting and automation of dashboards (Power BI) with indicators on audits and vulnerability classification according to OWASP top 10.
- EDF - Vulnerability Operation Center (VOC) – Assistance in defining a roadmap for setting up the VOC: Planning and conducting workshops to establish sizing assumptions for the VOC by 2025; Assistance in designing the VOC's strategic support for EDF top management.
- CNAM - Setting up a CSIRT – Assistance in setting up a CSIRT: Preparation of workshops for formalizing the CSIRT's RACI; Governance activities to ensure SIM3 compliance.
Recommendations
Be the first to recommend Freddy
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Computer Engineering DegreePolytechnique2019Génie Informatique