Freelancer profile translated to English.
Back to original languageAbout Ludovic
ISO 27001 / EBIOS RM / Externalized CISO Consultant, I support companies, IT service providers, and sensitive organizations in structuring their information security, implementing their ISMS, and preparing for ISO/IEC 27001:2022 certification.
I work on security governance, risk analysis, compliance, and operational management missions, with a pragmatic approach, adapted to the field and the organization's real constraints.
I can help you to:
- Implement or take over an ISO 27001 project;
- Conduct a risk analysis according to EBIOS RM;
- Structure your policies, procedures, registers, and evidence;
- Prepare your internal audits and your certification roadmap;
- Strengthen your ISMS governance and your posture regarding NIS2.
My added value:
- Dual governance + technical expertise;
- Global vision of risk / compliance / operational;
- Ability to transform a partial existing system into an operational framework;
- Results-oriented support, without "over-engineering".
Certifications:
- ISO 27001 Lead Implementer
- ISO 27001 Lead Auditor
- ISO 27005 Risk Manager
- NIS2 Lead Implementer
- EBIOS RM in progress
Common deliverables:
EBIOS RM risk analysis, IS policy, security policies, operational procedures, risk treatment plan, statement of applicability, ISMS dashboards, internal and certification audit support.
French
Native or bilingual
English
Fluent
Can work on-site
Vannes (up to 50km)
Experience
- Compu-Breizh Informatique,Founder-Manager – Cybersecurity ConsultantDIGITAL AND ITOctober 2014 - Today (11 years and 10 months)Morbihan, FranceStrategic intervention with companies for the outsourced management of their information system, integrating the security of IT and telecommunications infrastructures. Collaboration with leading technology partners for the deployment of secure solutions tailored to specific client needs. Main missions:
- Design and implementation of security policies compliant with international standards (ISO 27001, ISO 27005) for the protection of sensitive data and the security of WAN, LAN, and VOIP access.
- Risk management: identification of vulnerabilities, impact assessment, and implementation of mitigation plans.
- Deployment of cybersecurity solutions: firewalls, antivirus, data encryption, and access control.
- Security and compliance audits: conducting security diagnostics, corrective recommendations, and action tracking.
- User awareness and training on cybersecurity best practices.
- Monitoring compliance with current regulations (GDPR, network and information system security).
- Drafting procedures and technical documentation to ensure traceability and compliance of interventions.
- Security project management: from needs analysis to solution deployment, including security incident management.
Key results:- Continuous optimization of infrastructure performance, reliability, and security.
- Implementation of backup and business continuity processes (BCP/DRP).
- Supervision of coding, confidentiality, and backup policies in a multi-site environment.
- Euraf puis Mat' Agro/Secma Cabon (rachat),Information System and Information Security Manager, Network EngineerMEDICALJanuary 2018 - January 2023 (5 years)Quimper, FranceProposal of secure technical architectures according to client specifications (CCTP in the context of tenders) for pharmacy automation and robot solutions in hospitals and retail pharmacies.Management of the IT park and information systems across multiple sites and associated security in the context of rising cyber threats. Creation of VPN bridges and client connections between 3 sites during the pandemic and lockdowns.
- Design, deployment, and management of the company's network architectures.
- Implementation of security standards, including those related to access conditions.
- Installation and configuration of equipment for various technical platforms.
- Control of the proper management of access rights to machine and user networks.
- Deployment and management of mobile devices, Wi-Fi router configuration, router and firewall implementation.
- Implementation of security best practices, information classification, and naming conventions.
- EurafInformation System and Information Security ManagerMEDICALMay 2013 - December 2014 (1 year and 7 months)92130 Issy-les-Moulineaux, FranceOverhaul of the Information and telephone system to optimize remote work and travel costs:
- Management of conflict situations with suppliers/end clients (hospitals).
- Implementation of secure interconnections between different company networks.
- Technological watch to discover the latest innovations in software and systems.
- Monitoring and resolution of network problems to minimize downtime.
- Training new users on the correct use of company tools and software.
- Implementation of data backup and recovery policies, adherence to security standards.
Recommendations
Be the first to recommend Ludovic
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- NIS2 Directive Lead ImplementerPECB DEVFORMA2025NIS2 Directive Lead Implémenter
- Ebios RM in progress for PECB certificationDEVFORMA2025Ebios RM en cours de certification PECB