Freelancer profile translated to English.

Description

CISO with 26 years of experience, including 10 years as an operational CISO at CEA Marcoule.

I act as a part-time CISO for mid-sized and large companies, industrial SMEs, and organizations subject to strict regulatory constraints: NIS2, DORA, LPM, RGS, IGI 1300.

I build sustainable security policies, manage risk analyses, and support management in achieving compliance, with an operational focus on critical and industrial systems.

Industry field of expertise

Languages

English
Conversational

Workplace preferences

Can work on-site

Avignon (up to 50km), Nîmes (up to 20km), Montpellier (up to 20km), Aix-en-Provence (up to 30km), Alès (up to 20km)

CEA
IT Governance & CISO Project Manager
ENERGY AND UTILITIES
September 2018 - January 2024 (5 years and 4 months)
CISO:
Conducted security impact studies and implemented the IS Security Policy on over 10 IT projects.
Processed industrial and office IT system approval files (control systems, supervision, business tools).
Deployed encryption tools: secure vaults, encrypted messaging, secure partner zones.
Established Security Assurance Plans (PAS) with digital service providers.
Cyber crisis management: network incidents, compromised workstations, zero production interruption.
Access and rights management, and monitoring of authenticated electronic signatures.

IT Projects:
Deployment of an activity management tool across 53 INBs, multi-site coordination, harmonization of business and IT processes.
Assistant project manager for the national deployment of a nuclear material management tool.
Agile contribution to a sensitive waste management tool (nuclear, chemical, conventional).

IT Governance: Mapping of IT systems and rationalization of DDSD tools (elimination of functional redundancies).
Coordination of ORANO data migration following the takeover of the Marcoule center by CEA.
Phénix
Operations Manager & CISO
September 2009 - August 2018 (8 years and 11 months)
21 N End, Croydon CR0 1TY, UK
CISO: Implementation of the IS Security Policy on critical control and supervision systems.
Awareness of teams on industrial cybersecurity and nuclear safety requirements. Coordination of the complete migration of the server infrastructure in compliance with regulatory constraints. Management of access, rights, and integrity of critical systems.
CEA
Maintenance Technician
July 1998 - September 2009 (11 years and 2 months)
21 N End, Croydon CR0 1TY, UK
Operation and maintenance of digital control and regulation systems. Installation of radioprotection equipment and exit control gates.