Freelancer profile translated to English.

Back to original language

Description

Mission: Lead information system security improvement initiatives.

• Lead actions for compliance with ISO27001 standard

• Draft Business Continuity and Disaster Recovery Plans (BCP/DRP)

• Lead security committees and awareness sessions

• Train teams on security processes

• Analyze risks and define risk treatment plans

• Risk analysis in new projects (EBIOS)

• Supplier audits

• Security incident management

• Define a security incident management process

• Ensure monitoring of software and hardware threats and vulnerabilities

• Implement vulnerability remediation process

• Lead vulnerability remediation

• Propose projects to improve internal security

Industry field of expertise

Languages

English
Fluent
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

THALES
GRC Consultant
TELECOMMUNICATIONS
April 2023 - November 2025 (2 years and 7 months)
Paris, France
Missions:
- Preparation of approval files presenting the risks and compliance level of sensitive information systems subject to IGI1300, IM900, II901 regulations.
- Drafting of the Business Impact Analysis (BIA).
- Assistance to decision-makers in evaluating threat sources, targeted objectives, feared scenarios, and their impacts.
- Compliance audit with the aforementioned regulations.
- Evaluation of the maturity level of implemented measures.
- Risk analysis and proposal of a risk treatment plan submitted to stakeholders for action prioritization and/or residual risk acceptance.
- Management of security projects ensuring information system compliance.
- Support for projects in implementing secure architectures according to the "Secure by Design" approach.
- Drafting of security processes (BCP/DRP, Security incident management, user account management, patch management, vulnerability management, backup management).
Information System Security Governance (policies, procedures, processes, charters) Regulatory Compliance IGI1300, IM900, II901 Security Audit Management (internal, external, service providers) Risk Analysis & Risk Treatment Plan (EBIOS RM) Business Continuity, Incident Management, Crisis Management, Patch Management
Orange Business Services
Security Engineer
TELECOMMUNICATIONS
September 2018 - September 2022 (4 years)
Paris, France
Mission: Lead information system security improvement initiatives.
• Lead actions for compliance with ISO27001 standard
• Draft Business Continuity and Disaster Recovery Plans (BCP/DRP)
• Lead security committees and awareness sessions
• Train teams on security processes
• Analyze risks and define risk treatment plans
• Risk analysis in new projects (EBIOS)
• Supplier audits
• Security incident management
• Define a security incident management process
• Ensure monitoring of software and hardware threats and vulnerabilities
• Implement vulnerability remediation process
• Lead vulnerability remediation
• Propose projects to improve internal security