Irène Kleiber

Management of security, fraud, and compliance at Meetic Group.

- Information Security: Governance management: IT security awareness and training, definition of master plans and quarterly roadmaps, definition of policies and procedures, security project management: BCP, IAM, implementation of phishing tools...

- Fraud: Fight against fraudsters, definition of strategy and tools to implement, fraud monitoring and watch...

- Compliance: Steering and monitoring of PCIDSS and SOX compliance and audits.

Project/expertise manager in SSI (Governance, Risk, and Compliance) - Steering various missions in the Finance and Luxury sectors:

- GDPR compliance project: project management and monitoring, awareness/training of employees and business units (communication plan),

- IT and SSI mapping: assessment of IT/SSI maturity level, conducting interviews with business units, developing the mapping and raising awareness among management,

- SSI master plan and roadmap: identification and study of business strategic issues and directions, formalization of the master plan and roadmap

Team Lead within the GRC (Governance, Risk, and Compliance) department at Harmonie:

- Team steering and management - In charge of a team of 8 people,

- Weekly follow-up and team coaching: close management,

- Conducting annual reviews: validation of achievements over the year, definition/validation and monitoring of career plans,

- Leading team meetings with feedback on strategic missions carried out (functional and regulatory watch),

Participation in company strategy:

- Organization and facilitation of management meetings,

- Assistance in defining various management strategies,

- Preparation of commercial proposals.

- Risk analysis & management (according to ISO 27005 standard):

Identification of critical company assets, identification of threats and vulnerabilities, proposal of countermeasures, prioritization and quantification of risk measurement and treatment.

- BCP - Business Continuity Plan & Crisis Management

Analysis of business stakes and issues, definition of the BCP scope (lotting): identification of critical departments, development of crisis management guides/manuals and kits, development of scenarios by impacted departments, implementation of continuity plans by scenario, definition of crisis management and communication strategy, strategic advice to general management and employee awareness, implementation of crisis exercises (4 crisis exercises conducted).

- Business Awareness:

Leading training and security awareness meetings for all sales departments of vente-privee.com (best practices to implement, awareness of major security attacks).

- Security Support & Incident Management: On security tools (internal/external fraud detection tools) and customer security issues (phishing).