Jad Joumblat

Definition and implementation of the company's cybersecurity governance according to ISO27001 standard (Risk analysis, risk treatment plan, BCP/DRP…), steering security committees, ExCom reporting, budget management, management of internal/external teams. GDPR/DORA compliance and audit for dozens of companies. Official Auditor for AFNOR (ISO 27001, HDS, ISO27701, GDPR, Label ExpertCyber).

Implementation of a global IT security redesign plan within the framework of a carve-out.

• o In-housing plan for all cybersecurity activities

• o Participation in the selection of solutions and service providers

• o Participation in the structuring of internal teams (SOC, ISP, GRC, IAM…)

• o Team management (up to 45 people)

• o ExCom reporting

• o Implementation of an ISMS (IS Policy, Risk Analysis, documentation corpus…)

• o Definition and compliance with regulators (ACPR, DORA, NIS…)

Cloud Governance (AWS/Azure), risk analyses, security validation of technical solutions, drafting of policies, processes, and procedures, GDPR compliance for Cloud and other innovative solutions, team management.