Freelancer profile translated to English.

Description

Information Systems Security Professional, with 10 years of experience: planning, design, integration, and audit.

I support my clients in assessing and managing the security and continuity risks of their IS, by translating business functional needs into organizational and technical control measures:

- Governance,

- Awareness

- Integration

- Infrastructure Security (on premise, Cloud)

- Integrating security into projects,

- Operational security management,

- Continuous monitoring,

- Audit,

I have held IS security management positions in international financial institutions and have managed third-party audits for several companies, including financial institutions and government agencies.

I am also Secretary General of the CAF (Cyber Africa Forum) organized by the Ciberobs association and President of the Guinea Cybersecurity association (an association working to popularize cybersecurity in Guinea).

I have assisted international companies on various topics of Cybersecurity Architecture, Governance, Risk, Compliance, Audit, Security Integration in projects.

My technical background, my knowledge of different business and regulatory contexts allow me to interact effectively with various types of stakeholders.

Industry field of expertise

Languages

French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

GRDF - DTI
Cybersecurity Architect
ENERGY AND UTILITIES
September 2019 - Today (6 years and 9 months)
Paris, France
As part of the construction of a new Data Center, I participated in the implementation of a new LAN, Security, Backup, Compute, Storage, and Monitoring infrastructure as a Cybersecurity Architect.

- Drafting specifications
- Participation in presentations
- Review of bidder responses
- Drafting security policies, processes, and procedures
- Drafting of hardening policy for LAN/SEC equipment (Switch, Firewall, Load Balancing, Proxy, Anti-DDoS Solution, micro-segmentation)
- Integrating security into application and infrastructure projects
- Managing Security Audits (Technical, organizational, architectural, configuration)
- Drafting of a PAS (Security Assurance Plan), flow policy, and Risk Analysis
- Managing Security Audits (organizational, architectural, configuration)
- Drafting of the flow policy and validating flows
- Drafting of the AWS environment security policy
- Drafting of the industrial security policy
- Deployment of the virtualization and system tooling foundation
- Deployment of the backup and storage infrastructure foundation
- Deployment of the LAN / SEC infrastructure foundation
- Validation of the hosting provider choice
- Deployment of the EDR solution (Crowstrike)
- Implementation of the Micro-segmentation solution (Guadicore)
- Deployment of the SIEM solution (Splunk)
- Implementation of the flow management solution (Algosec)
- Cybersecurity support for the Kubernetes solution
- Redesign of the WIFI infrastructure architecture
Egerie Palo Alto Fortinet ISO 27005 ISO 27002 CC CISSP ALGOSEC Splunk GUADICORE CROWSTRIKE ACI CISCO Security Audit ISSP Google Cloud IS Governance Risk Analysis Compliance ISP Zscaler Splunk Dynatrace Log Pool AWS Cloud
CS NOVIDYS
Cybersecurity Consultant
BANKING AND INSURANCE
January 2017 - September 2019 (2 years and 8 months)
Paris, France
Security and Network Solution Integrator for several companies across Europe (France, Poland, Germany, Spain, Belgium)

- Drafting of Network and Security Technical Architecture documents
- Integration of solutions: Palo Alto, Fortinet, Cisco Switch
- Platform administration (Panorama, Fortimanager)
- Firewall and switch updates
- Network and security infrastructure consulting and auditing
- Network and Security incident response
- Network and security architecture redesign
- Organization and facilitation of steering committees
- Review and update of SSI documents
- Update of the ISSP
- Elaboration of the risk map
- Data classification
- Project Security Integration
- Determination of the relevance of creating/modifying global security rules in flow matrices
- Participation in flow validation committees
- Compliance of architectures with ANSSI, CIS, and NIST recommendations
- Drafting of specifications for calls for tender
- Security Audit support (Architecture, Configuration, Organizational)
ISO 27002 ISO 27005 EBIOS RM Cisco Technologies Palo Alto Fortinet ISSP IS Architecture ASA NIST