Laura F.

Group CIO - position reporting to the Group's Global CISO

- Management of the Group's Cyber OT program and management of a team of about ten people (PM/PMO, experts, auditors, architects…)

- Coordination of all CISOs (CSOs) of industrial sites across the group's 4 Business Units (Renewables, Nuclear, Thermal, Gas…) and 4 global regions

- Definition of the Group's industrial cybersecurity strategy, translation of strategic objectives into roadmaps (projects, deliverables, and key reporting KPIs).

- Budget Management (in millions) for the OT program

- Scoping of projects

- Management and expertise on the entire project portfolio:

- Governance (drafting an OT framework of security controls aligned with international standards: IEC62443, NIST, ISO27000.., cyber by design processes in industrial projects, clauses to be applied in contracts with our suppliers, methodologies for classifying industrial sites: sensitive vs. standard…)

- Management of compliance for sensitive industrial sites

- Study and implementation of group IT & Cyber solutions for OT / SCADA systems (industrial probes, OT bastion, SD-WAN / AWS connection…).

- Management of RFPs and construction of the business model associated with these new central services

- Reporting to Top Management (Steering Committee, Comex KPIs, Monthly CISOs…)

- Facilitation of the OT business community (Technical Webinars, E-learning…)

1) Co-stream Leader of a team of 5 people - stream "Cross-functional Architecture & Standards"

ENGIE Group CIO | January 2022 - Present (12 months)

- Creation of the stream from scratch, reporting directly to the Group CTO/CISO and Group Lead Architect

- Creation and monitoring of the annual roadmap and budget (~€900k)

- Management of multiple IT & Cybersecurity projects

- Management of the stream's personnel (-5) and coordination of other program streams

- Reporting and participation in meetings: Architecture Board, Steering Committees, Stream leader weekly meetings...

- Scope: IT & OT (Industrial Control System)

- Examples of technical projects:

-> Conducting assessments of existing systems and/or comparative studies of new solutions to rationalize the IS, or for continuous improvement (e.g., industrial bastion, industrial PKI, radius server...)

-> Scoping and management of the migration of the Group's old ITSM tool to ServiceNow

-> Conducting assessments of existing systems and/or comparative studies of new solutions to rationalize the IS, or for continuous improvement (e.g., industrial bastion, industrial PKI, radius server...)

-> Scoping and assistance in drafting Group policies/standards: Group IT policy, IT & Security thematic Cloud policy, Posture management...

-> Coordination with all SPOCs from the Group's international entities

2) Cloud (AWS / Azure) & WIFI Project Manager

ENGIE Group CIO | 2021 (1 year)

- Coordination of various ENGIE IT teams (15-20 people) and project monitoring/reporting

- Scoping & build phase of the Group's multi-Cloud architecture

-> Development of the "EQUANS" carve-out strategy with the creation of a full cloud network from scratch

-> Contribution to the build of service offerings/business models for the "ENGIE IT" managed service provider

-> End-to-end support for entities in their MoveToCloud

-> Architectural elements studied: type of entity connection to the backbone, infrastructure resilience, centralized WAF model (Web-Application Firewall), VIP migration to AWS Edge, multi-cloud...

-> Implementation of security strategy for guest wifi (via Zscaler)

-> PowerBI Dashboarding

3) IPAM, DNS & WIFI Network Project Manager

ENGIE Group CIO | 2020 (1 year)

- Scope: approximately 200 Group entities + ENGIE IT teams (10 people)

-> Deployment of a transparent, secure, and unified wifi solution for the entire Group

-> Centralization via a single tool of the Group's private/public/on-prem/Cloud IP subnets

- Strategy for implementing these tools and managing the cross-entity roll-out

Other client projects: physical data center security scenarios - SPIE / DDI solutions benchmark - CA-GIP / Digital Workplace Guide -Société Générale

Internal projects within the firm:

-> Participation in client pitches via Salesforce

-> Writing commercial proposals

-> Building offers and participating in Knowledge Management

Responsible for developing and managing foreign markets for four Spanish SMEs.

- Management of clients' Export departments

- Writing market research reports

- Commercial prospecting

- Creation of a database of relevant potential clients

- Writing a bi-monthly summary report for our clients

- Organization of clients' international business trips

- Writing documents in foreign languages (Spanish/French/English)