Jean Paul Mistrali

Assignments focused on Governance, Risk, and Compliance (GRC) and assistance to Compliance Officer.

Support in defining, implementing, and managing the compliance framework, risk assessment, drafting internal policies, and coordinating audits and corrective actions.

Support in carrying out several GRC assignments (Ebios RM risk analyses, ISO 27001/ISMS implementation, ISP).

Development of commercial strategy, development of a portfolio of cyber offerings (GRC, OffSec, DevSecOps, resilience), recruitment of consultants, search for partners to respond to tenders as a group, lead response, client visits, team management, and more.

Obtained and executed several assignments: in GRC (Ebios RM risk analyses, ISO 27001/ISMS implementation, ISP); OffSec (Code audit, architecture audit, Pen tests); DevSecOps (Code audit, training).

PASSI certification. As part of the subsidiary's PASSI certification, preparation of eligibility files in accordance with the framework, assessment of the Iriguard system to host the PASSI structure. Support for physical and logical compliance of the PASSI structure (Restricted Diffusion IT premises as defined by Instruction Interministérielle 901) and support for preparing the headquarters audit with CertiTrust.

Organization and management of the SOX campaign, including planning, supervision of internal control tests, and consolidation of compliance deliverables. Development and coordination of responses to cybersecurity RFIs issued by investors, Dow Jones, and regulators, in close collaboration with management, the legal department, and the Compliance Officer, to ensure the consistency, reliability, and compliance of transmitted information.