Freelancer profile translated to English.

Description

Independent consultant since 2009, I have worked in many fields such as industry, geolocation, transport, and also subjects related to banking and payment processing.

I am a seasoned project manager, I can support you on complex projects.

I have developed strong expertise in the PCI DSS field by contributing to the certification of activities or services for major clients such as APRR, Vinci Autoroutes, Oney Banque (Auchan), arvato (Bertlesmann), Bourse des Vols. Beyond project management and governance aspects, I directly contribute to the creation of the documentary corpus (policies, procedures, risk analysis, etc.) as well as the organization and conduct of audits.

I also master GDPR, mainly in its security and compliance governance aspects, I have supported large companies in the tourism sector (Voyageurs du Monde ...) in their processes.

I work on a fixed-price and time & materials basis, mainly remotely.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Remote only

Primarily works remotely

APRR
PCI DSS Consultant
TRANSPORTATION
March 2021 - June 2022 (1 year and 3 months)
As part of a PCI DSS certification project, I am responsible for the following tasks:
- Wallix deployment
- MFA deployment
- Tripwire (FIM) deployment
- Security procedures and policies
- Management of the production of deliverables related to PCI DSS certification
- Organizational and project strategy advice
PCI DSS Security Policy Technical Project Management
VINCI Autoroutes
PCI DSS Project Manager
CIVIL ENGINEERING
March 2020 - Today (6 years and 3 months)
Rueil-Malmaison, France
VINCI Autoroutes

Security & PCI DSS Project Manager - Cofiroute
May 2021 - Present

Responsible for several projects for Cofiroute:
- PCI DSS RUN (Maintaining compliance)
- Preparation and organization of compliance audits
- Disaster Recovery Plan / Business Continuity Plan (Vinci Autoroutes Scope) - Cofiroute Correspondent
- IT System Security (Passwords, MFA)
- CyberArk bastion implementation

PCI DSS v3.2.1 certification renewed on June 7, 2022.

Project Manager - PCI DSS Certification - Cofiroute
March 2020 - May 2021 · 1 year 3 months

For a fleet of ~1500 controllers connected to the Cofiroute payment processing "bunker", PCI DSS 3.2.1 certification project (QSA: Verizon):
Planning, Tasks, TBD, project monitoring, reporting
Audit management
Remediation plan
Writing and implementation of procedures
QSA management / liaison
Vendor management
Risk analysis
Transition PCI DSS v3.2.1 => v4.0

Initial PCI DSS v3.2.1 certification granted on May 18, 2021.
PCI DSS Expertise Technical Project Management
Bourse des vols
PCI DSS Project Director & DPO
TRAVEL AND TOURISM
March 2018 - March 2020 (2 years)
Paris, France
PCI DSS compliance for an online travel agency:
Gap analysis
Remediation plan, scope reduction
Writing of security policies and procedures
Writing of SAQ-D
Project management
GDPR compliance for an online travel agency:
Vendor registry
Processing registry
Staff awareness
Personal data management policy
Project Management
DPO DPD Project Management PCI DSS GDPR GDPR