Jean-François Di Tommaso Yekpe

Management of the GRC service center, including cybersecurity awareness activities. Transversal intervention including budget and resource management (staffing), as well as operational support on the following topics (non-exhaustive list): Cybersecurity Governance NIST framework assessments Security integration in projects Awareness and training Regulatory compliance (cyber & IT) ISO 27001 compliance Control plan Cyber ISO 27001 dashboards

Interim ISMS Manager – Operational management of the ISMS Operational responsibility of the ISMS on an interim basis, including the production of performance indicators, the implementation of the control plan, as well as the monitoring and management of the risk treatment plan. Guarantee of the operational maintenance of the ISMS and continuous improvement. Management of a team responsible for extending the certification scope. Management of the ISO 27001 compliance project for the concerned scopes (3 processes), including the formalization of all required documentation. Preparation and support up to the certification audit

Management of the compliance program for the electrical management system responsible for controlling remote monitoring and control of electrical supervision dedicated to the operation of the train. Performance of an EBIOS RM risk analysis, using an LPM and IEC 62443 framework. Scoping of LPM PASSI audits, writing of fundamental procedures required by LPM, consolidation of LPM indicators, consolidation of the approval file