Hafssa Essebaa

• Participate with the CISO in drafting the IAM policy for Real Estate.

• Prepare templates for drafting authorization management procedures for each application.

• Integrate the IAM program into divisions/business units: - Prepare schedules: Roadmap (140 applications), workload in days/hours, workshop timing...

- Lead workshops for:

◦ Presentation of the program with its solutions

◦ Drafting authorization management procedures for each application in compliance with the IAM policy

◦ Preparation of MyAccess enrollment files

◦ Preparation of communication kits

◦ Training of end-users of the solution

Drafting Internal/External:

◦ Project Governance: Kick-offs, Project Committees, Steering Committees...

◦ Update of the Refog group directory for the entity

◦ Analysis of employee Entry/Mobility/Exit workflows

◦ Creation of the identification process map

◦ Drafting of the new digital identity management process for BNPP RE employees

◦ Lead workshops to raise awareness and responsibility among stakeholders involved in the implementation of the digital identity process. 3: Drafting/Validation by the IT team

◦ Validation of the ASC (Asset Security Card): an evaluation form for RE applications regarding CIDT levels, group security requirements...

• Identify and organize departmental contributions to various external stakeholders (management committees, regulators, rating agencies, etc.): coordinate internal teams, conduct complementary analysis and/or synthesis.

• Take charge of new topics for the department, at the request of the department head or external stakeholders: qualify requests, identify contributors, define the scope and express needs, lead meetings, manage projects.

• Structure the department's operations: draft organizational memos, lead cross-team meetings, support transversal projects within the department.

• Collaborate with the Bank of the West (BOTW) team to close an IG recommendation consisting of implementing an IT Risk governance charter between BOTW and the ITRMG department.

• Support CA-Leasing & Factoring, CA-Assurances, and CA-Titres clients in implementing security measures defined by the Crédit Agricole Group and within the CARS (Crédit Agricole Security Reinforcement) Program.

• Participate in the "DES" information system security audit:

◦ Follow-up on recommendations;

◦ Draft deliverables;

◦ Present results to the general inspection.

• Participate in the PSI (IT Disaster Recovery Plan):

◦ Implement IT disaster recovery plans;

◦ Monitor and correct anomalies;

◦ Develop technical roadmaps;

◦ Present/draft tracking files.

• Incident Management (Investigation, communication...)

◦ Analysis/Investigation of incidents sent by the SOC;

◦ Communication of incidents...