Freelancer profile translated to English.

Description

With over 5 years of experience in cybersecurity, I have had the privilege of collaborating with various major clients across a multitude of business sectors on high-stakes missions, allowing me to quickly acquire diverse skills. My career has enabled me to successfully navigate between demanding operational missions and governance-focused mandates, with direct exposure to the highest levels of management, as seen in my last assignment.

Although a significant portion of my recent experience is more functional than technical, it has been essential for me to delve into the more technical aspects to better understand challenges and provide tailored solutions. Thus, I define myself as a versatile consultant capable of bridging the gap between program/IS management and expert or development teams.

Furthermore, I firmly believe that while cybersecurity is undeniably rooted in technical challenges, the human element remains at the heart of any effective strategy. Therefore, I have always integrated this dimension into my activities, considering that the adoption of good practices is the cornerstone of any robust security approach.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

Bancaire
Go To Cloud Project Manager - Security Support for Migration of 600 Applications
October 2023 - Today (2 years and 10 months)
Go To Cloud - Managing security support for the massive migration of all applications to private and public clouds:

Directly reporting to the CISO, my role was to manage all security-related activities for the project of migrating all applications to private and public clouds. This project was highly visible to the CIO due to security stakes and underlying policies.

Securing Private & Public Cloud Foundations
Operational management of expertise activities with a team of 4 security experts.
Managing risk analysis of the foundations and the migration framework (framework designed before my assignment).
-Private Cloud: Openstack & VmWare
-Public Cloud: AWS
Identifying complementary measures to implement, categorized into 3 themes (Security Operations, IAM, Application Security/Segmentation).
Supporting stakeholders (architects, SecOps, program management) in implementing these measures by producing deliverables (Security Notes, incident management, user guide for the new patch management tool, IAM exception procedures, IAM derogation model, security advice for Cybertrust encryption solution, CyberArk enrollment procedure, etc.).
Managing PoCs and deploying security solutions (Example: CNAPP, Cyphertrust, Dataperimeter, etc.).
Migrating the AWS BDDF tenant to the group tenant.
Monitoring the implementation of measures.
Weekly reporting to the CISO on work progress.
Drafting some deliverables during peak workload not absorbed by experts.

Migration Monitoring & Governance
Developing and validating the security strategy to be applied.
Implementing the strategy and associated controls.
Managing the team of security analysts (3 analysts).
Establishing associated governance:
- Creating and leading steering committees at various levels (Program Management and CISO Management).
- GO/NO GO Committee to decide on cloud migration based on the defined strategy.
- Quarterly reporting to the CIO committee.
- Defining, consolidating, and managing the budget (1 Million)
Cloud computing Architecte Cloud Amazon Web Services Conformité réglementaire Project Management (PMO) Gestion des identités et des accès (IAM) Gestion des incidents Patch Management
Bancaire
Secure By Design - Project Manager
October 2023 - Today (2 years and 10 months)
Following a combination of political will and regulatory need, it was decided to launch a group-wide Secure by Design program, rolled out across business units.
I was responsible for managing this program within my business unit.

Developing and validating measures to be integrated into the SecByDesign framework.
Implementing control procedures and associated tools for SecByDesign.
Establishing associated governance (Committee structure and Reporting).
Managing the evolution of the framework and tools (Migration to a centralized group tool).
Change management: Designing, executing, and leading awareness campaigns (Evaluation Guide, catalog of measures and associated solutions, coffee & learn sessions, etc.).
Defining, consolidating, and managing the budget (500k annually)
Chef de projet MOA Mise en conformité Cybersécurité Sensibilisation à la cybersécurité Analyse de risques
Bancaire
Assistant CISO
March 2022 - September 2023 (1 year and 6 months)
Brunoy, France
Assisting the CISO in the context of the IS migration to the new parent company (Crédit Agricole):
• Comprehensive review of the IS security documentation corpus
• Evaluation of cyber maturity level
• Development of a cyber roadmap within the framework of end-of-life and total IS migration
• IS Security expertise on security incidents/events
• Leading and preparing security committees
• Employee awareness campaign
• Supporting projects and architects in defining architectures in compliance with IS security policies
• Development and monitoring of security dashboards
• Technological and regulatory watch
Cybersécurité Gouvernance Gestion de projet Gestion des risques Antivirus Compliance Migration SI