Freelancer profile translated to English.
Back to original languageAbout Etienne Leon Gauss
IT systems security consultant, I support companies in integrating security into their projects. I work on governance, risk, and control (GRC) topics:
- Risk analysis
- Security control (1st and 2nd line of defense)
- Third-party management
- IT security project management
- Operational security management (DRP testing, backup testing)
- Vulnerability and security patch management
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 40km), Lyon (up to 20km), Lille (up to 50km)
Experience
- TotalEnergiesHead of Cybersecurity Service CenterENERGY AND UTILITIESApril 2024 - February 2025 (10 months)Paris, FranceTeam Management
- Organize team activities and report information to management
- Manage the service steering committee
Coordinate the deployment of EDR in TotalEnergies subsidiaries- Define stakeholders, geographical scope, and endpoints concerned (on-premise and cloud servers)
- Collaborate with technical teams to define installation prerequisites, installation scripts, and error analysis scripts
- Validate automated deployment tests via SCCM
- Define a progressive deployment plan and communicate with stakeholders
- Support local IT managers in error correction during the deployment phase
- Present project progress in steering committee meetings
- Coordinate incident resolution reported by EDR
Security Management with Suppliers- Conduct cybersecurity assessments of suppliers
- Analyze risks in projects, recommend and monitor action plans to mitigate risks
- Analyze solution architectures (software and cloud) to integrate security
- Develop the security assurance plan for projects and integrate security clauses into contracts
Vulnerability Management- Coordinate the relationship between SOC, CERT teams, and subsidiary Cyber Security managers
- Coordinate vulnerability remediation with subsidiaries
- bnpparibasTribe Security OfficerBANKING AND INSURANCEJanuary 2022 - February 2024 (2 years and 2 months)Paris, FranceIntegrate security into projects
- Coordinate security in projects from the initiation phase to production
- Define security requirements (DICT, RPO, RTO) for each project
- Analyze proposed solution architectures
- Perform risk analyses for projects and deliver recommendations
Integrate vulnerability management into projects- Define a source code vulnerability management process
- Coordinate SAST/SCA source code vulnerability scans
- Integrate vulnerability management into the development cycle through SAST/SCA vulnerability scans
- Define a vulnerability remediation plan and integrate it into project sprints
- Build a dashboard for project vulnerability tracking
Manage suppliers- Participate in supplier selection
- Manage third-party risks (TPRM)
- Define the security assurance plan for projects with suppliers
- Negotiate and integrate security clauses into supplier contracts
Participate in the Cybersecurity program- Coordinate the security review of applications (Risk Control Self Assessment)
- Coordinate application backup and restore tests
- Capsule Technologies / PhilipsCybersecurity risk management for medical devicePHARMACEUTICALS INDUSTRYFebruary 2021 - November 2021 (10 months)Cambridge, United StatesManage the manufacturer disclosure statement for medical device security
- Study the architecture and security of the medical device
- Organize document review meetings with system architects and developers
- Produce the MDS2 (Manufacturer Disclosure Statement for Medical Device Security)
- Analyze project risks and make recommendations
Risk Management- Organize workshops with various stakeholders according to ISO27005 / EBIOS methodology
- Analyze security and HIPAA (Health Insurance Portability and Accountability) risks on the "Capsule Surveillance" medical device
- Write documentation on medical solution security for submission to the FDA (U.S. Food and Drug Administration) for accreditation
- Train system engineers on Philips' risk analysis tool
Recommendations
Be the first to recommend Etienne Leon Gauss
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Conception et Architecture RéseauxTélécom ParisTech2015
Certifications
- ISO/IEC 27001 Senior Lead ImplementerPECB2025
- ISO/IEC 27005 Lead Risk ManagerPECB2017