Freelancer profile translated to English.

Description

Cybersecurity Consultant | Governance | Risk, Audit & Controls

I support organizations in strengthening their cybersecurity posture through a risk-based and control-oriented approach.

My main areas of expertise include:

• Cybersecurity Risk Assessments (IT & OT)

• Cybersecurity Audits and Control Testing

• Design and Evaluation of Security Control Frameworks

• GRC Implementation and Governance Structuring

• Third-Party Risk Management (TPRM)

• Information Security Policy (ISP) Development and Review

• Compliance Alignment with ISO 27001, NIST, and Industry Standards

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent
Arabic
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

Rexel
IT Security Auditor
January 2024 - Today (2 years and 5 months)
Conducted internal audits of the Information Security Management System (ISMS) in accordance with ISO 27001.
Established and implemented an internal cybersecurity framework compliant with various standards (NIST, ISO, etc.) using a risk-based approach.
Performed cybersecurity audits to assess organizational posture using a risk-based methodology. Conducted internal audits of the Information Security Management System (ISMS) in accordance with ISO 27001.
Established and implemented an internal cybersecurity framework aligned with various standards (NIST, ISO, etc.) based on a risk-based approach. Performed cybersecurity audits to assess organizational posture using a risk-based methodology.
ISMS NIST ISO 27001 Risk Analysis ISO 27005
Rexel
Risk and Compliance Management Consultant
September 2023 - Today (2 years and 9 months)
Defined and monitored key cybersecurity performance indicators (KPIs) to evaluate and enhance the effectiveness of the security posture within various entities.
Analyzed the annual internal cybersecurity control framework and identified areas for optimization.
Led the review and update of the Group's Information Security Management System (ISMS) security policies and standards.
Ensured continuous compliance with ISO 27001 requirements.
Managed projects for the definition and formalization of Group cybersecurity standards.
Coordinated and supervised cybersecurity governance committees.
ISMS ISO 27001
AXA
Cybersecurity Auditor at AXA
August 2022 - August 2022
Conducted external audits as part of the Third-Party Risk Management (TPRM) process.
Formalized audit reports, including identified risks and control deficiencies.
Presented findings and recommendations to stakeholders and senior management.
Security Audit TPRM