Freelancer profile translated to English.

Description

Hello,

With 9 years of experience in IT Risk/SSI consulting firms, primarily in the banking and railway sectors, my expertise is divided into two main SSI themes:

- GRC: Cyber program monitoring, cyber project management, risk/ISP analysis, definition of remediation plans, compliance (regulatory or post-audit), etc.

- Operational Security: Data security (classification and DLP), incident management (CERT analyst), study, deployment, and configuration of cyber tools, etc.

My interventions can be ad-hoc - for example, monitoring audit recommendations or meeting compliance deadlines - or more long-term - as part of an internal team in ISP, IAM, CERT, or in managing/configuring cyber tools (AV, FW).

I am currently prioritizing assignments in the Nantes region over fully remote work.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Nantes (up to 30km)

Crédit Agricole
Vulnerability Monitoring / Security Officer
BANKING AND INSURANCE
June 2022 - August 2024 (2 years and 3 months)
Nantes, France
Security Officer between 2 entities: Vulnerability monitoring (TI, server scans, product scans), non-conformities, presentation of KPIs in committees (steering and operational). Point of contact for Cyber requests. Responses to regulatory audits.
BNP PARIBAS
ISP
BANKING AND INSURANCE
April 2021 - March 2022 (1 year)
Montreuil, France
Security and continuity review, risk analysis, implementation and monitoring of countermeasures, planning and monitoring of audits.
Validation of SSI projects and SSI derogations.
Firewall traffic review.
SNCF
CERT Analyst
TRANSPORTATION
September 2019 - March 2021 (1 year and 7 months)
Levallois-Perret, France
Level 3 incident and SSI crisis management.
Support for local operational teams, definition of tasks and remediation action plans.
Refinement of SIEM detection rules with the outsourced SOC (whitelisting, threshold definition).