Freelancer profile translated to English.
Back to original languageAbout Mahdi
Consultant specialized in Business Continuity Planning (BCP), Governance, Risk and Compliance (GRC), and Cybersecurity, with five years of experience. Possessing an analytical mind, I have proven expertise in business continuity, IT risk management, and information system security.
Certified ISO 22301, ISO 27001, ISO 27005, and EBIOS RM, I master the main normative and regulatory frameworks. Driven by a constant desire to learn, I put my skills to use in solving complex problems and supporting clients in their continuity, compliance, and security challenges.
French
Native or bilingual
English
Fluent
Can work on-site
Paris (up to 50km)
Experience
- BPCEProject Manager - BCP, GRC, and Cybersecurity ConsultantBANKING AND INSURANCEJuly 2024 - April 2025 (9 months)Paris, France• Project scoping and assessment of existing systems for subsidiary X• Evaluation of necessary resources: identification of application, human, informational, regulatory, legal, and logistical needs for effective integration• Budget estimation: Costing of the overall integration cost for the Business Continuity aspect• Facilitation of scoping workshops: Leading workshops with subsidiary management to identify specific business continuity needs (tools, crisis management systems, work methods)• Gap analysis: Comparison between BPCE group standards and current subsidiary practices (documentation, processes, tools, crisis management, continuity procedures, BIA, etc.).
- AXA GODORA Compliance - Senior ConsultantBANKING AND INSURANCENovember 2023 - June 2024 (7 months)Paris, FranceLeading the SCALA risk register integration mission - DORA Compliance• Project Management: Supervision of the migration of risk registers related to products and assets to a new tool.• Progress Tracking: Design of a dashboard with key performance indicators (KPIs) for project management.• Compliance: Review, update, and treatment of risks according to best practice frameworks.• Backlog Management: Gradual migration of risks to the new solution.• Automation: Development of a tool for automated conversion of Excel data into a format usable by Scala, improving efficiency and productivity.• Review and Validation: Facilitation of working sessions with project management for KPI review, project progress, and validation of ongoing tasks.
- AYVENSGRC / NIST AMOA SupportBANKING AND INSURANCEJune 2023 - November 2023 (5 months)Paris, FranceSupport for NIST Compliance and preparation for ISO 27001 certification – ALD France• NIST Framework Deployment: Contribution to the implementation of the NIST framework as part of the ISO 27001 certification process.• Control Management: Drafting, monitoring, and updating MOA sheets related to NIST controls (levels 1 to 5).• Evidence Collection: Coordination with project managers for the collection, verification, and validation of evidence required for the audit.• Stakeholder Assistance: Operational support to project managers for the analysis and processing of expected evidence.• Local Control Validation: Review and validation of compliance evidence for maturity levels 1 and 2.• Management & Reporting: Populating and monitoring KPIs in the NIST dashboard; development of management materials.• Project Governance: Active participation in operational committees (COMOPS) and presentation of progress to Security managers.
Recommendations
Be the first to recommend Mahdi
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master en système d'informationsESB - ESPRIT SCHOOL OF BUSINESS2020Master en système d'informations
Certifications
- ISO 22301 ImplementerISO - International Organization for Standardization2022
- ISO 27001 ImplementerISO - International Organization for Standardization2022