Freelancer profile translated to English.

Description

With 11 years of experience at Wavestone, I have supported numerous companies (AXA, Société Générale, TotalEnergies, SNCF, EDF...) on various cybersecurity issues.

Throughout these assignments, I have developed solid skills in project and program management, team coordination, risk analysis, and cybersecurity strategy definition. I have also participated in audits and maturity assessments, as well as commercial management (pre-sales, prospecting...).

My expertise covers Workplace security, data security, cloud security, IAM, as well as cybersecurity governance and risk management.

After 11 years in the Paris region, I am now based in Bordeaux and open to various assignments in the region. I put my experience and know-how at the service of your projects to ensure security, rigor, and efficiency.

Industry field of expertise

Languages

French
Native or bilingual
English
Native or bilingual

Workplace preferences

Can work on-site

Bordeaux (up to 50km), Paris (up to 50km)

Wavestone
Senior Cybersecurity Manager
CONSULTING AND AUDITS
July 2024 - July 2025 (1 year)
Paris, France
IAM Program Manager Assistant - AXA
Support to the IAM program manager on governance, strategy, risk management, and roadmap aspects. **Assignments**: program steering, access control platform migration (authentication and authorization), deployment of the IAM platform across the AXA Group.
Technological Expertise:PingIdentity, Saviynt, Active Directory, Cyberark
IAM Technical Project Management Saviynt PingFederate Active Directory
Wavestone
Cybersecurity Manager
CONSULTING AND AUDITS
April 2021 - June 2024 (3 years and 2 months)
Paris, France
Acting Group CISO - AXA
Support to the Group CISO function pending the recruitment of a new dedicated team. **Assignments**: definition of security controls and writing of policies (encryption, IAM, cloud, DORA etc.), advice to entities, ISP, development of security configurations for cloud environments, definition of the operational model, facilitation of security communities.
Technological Expertise:Azure, AWS, OpenPaaS, Microsoft Entra ID, Cipher Trust Manager

Steering of the IS Security Audit Mission - SNCF
Conducting security audits on strategic perimeters under mandate from the Group's digital division.Assignments:Conducting approximately 20 audits annually in France and internationally, presenting results to the CIOs and CISOs of the entities.
Technological Expertise:Owasp Top 10, Burp suite, Azure, AWS, Microsoft Entra ID, Microsoft Purview

Risk Analysis EBIOS RM - Cour de cassation, Dassault Aviation, etc.
Conducting risk analyses on critical company applications.Assignments:Working sessions, formalization and presentation, preparation of approval files
Technological Expertise: EBIOS RM

DLP Strategy Scoping - AXA UK
Definition of a target scenario for data loss prevention (DLP) and the associated organization. Assignments: interviews to gather business needs and existing situation, workshops to design the target state, development of a deployment roadmap.
Technological Expertise: Forcepoint, Microsoft Entra ID, Microsoft Purview

Zero Trust Program Scoping - AFLAC (US)
Assisting AFLAC in structuring its Zero Trust program.Assignments:analysis of the existing situation and needs, formalization of the high-level strategy, scoping of program projects, development of the business case.
Technological Expertise:CrowdStrike, PingIdentity, OneIdentity, Splunk, Zscaler
CISO Cybersecurity Governance Security Audit ISO27001 data security
Wavestone
Senior Cybersecurity Consultant
CONSULTING AND AUDITS
September 2018 - March 2021 (2 years and 6 months)
Paris, France
IS Security Program Scoping and Steering - La Mutuelle Generale
Launch and steering of a security program including the deployment of an IAM tool and ISO27001 compliance. **Assignments**: workshops to define the target state, detailed design, steering of the integrator, acceptance testing, change management, communication with the executive committee.
Technological Expertise:Sailpoint

DLP Strategy Scoping - La Banque Postale
Assisting La Banque Postale in scoping a data loss prevention (DLP) strategy.Assignments:interviews to gather business needs (financial processes), facilitation of workshops to design the target organization, formalization of a DLP roadmap.
Technological Expertise:Forcepoint, Microsoft Purview

Group SSO Platform Remediation Plan - Société Générale
Management of the action plan to stabilize the SSO solution (1,500 applications, 100,000 users) following critical incidents impacting business operations.Assignments:construction and steering of the plan, reporting to top management.
Technological Expertise:Broadcom Siteminder

IAM Solution Implementation Project - Société Générale (GBIS)
Agile steering of the deployment of a new IAM solution.Assignments:development of business cases, writing of functional specifications, communication with developers, prioritization of functionalities, acceptance strategy, project reporting.
Technological Expertise:Forgerock OpenAM, Forgerock OpenIDM

Cybersecurity Startup Radar - Wavestone
Enhancing Wavestone's market knowledge of innovative cybersecurity startups.Assignments:technological watch, solution qualification, knowledge capitalization, organization of meetings with startups, presentations at events (Vivatech, FIC, European Cyber Week), writing articles (Global Security IT Mag, Les Échos).
IAM CISO Microsoft Purview Sailpoint ISO 27001