Freelancer profile translated to English.

Description

GRC Cybersecurity Engineer, I specialized in the banking sector. My experience has allowed me to acquire expertise in crisis management and operational resilience, risk management, and operational security. I also worked extensively with business stakeholders, which allows me to understand cyber challenges and their impacts today.

My varied experience allows me to adapt in all fields.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Lyon (up to 50km), Marseille (up to 50km), Paris (up to 50km), Toulouse (up to 50km)

Crédit Agricole Technology Serices
GRC Cybersecurity Consultant
BANKING AND INSURANCE
June 2025 - Today (1 year and 2 months)
Security Desk Management:
oImplementation of whitelists/blacklists on CATS proxies and Regional Banks
oSecurity analysis of new software
oValidation of firewall rule modifications
oValidation for antivirus and EDR exceptions
oManagement of cyber incidents sent by the SOC
oAccess management
VSE Referent (AlgoSec)
oSecurity analysis and validation of requests for opening flows between different SI zones
oImplementation of a flow opening rule matrix
oImplementation of exceptions in collaboration with the CISO team
Vulnerability Remediation
oReception of CVE alerts from CERT
oEscalation to the responsible solution Squads
oFollow-up of remediation
Implementation of Level 1 Controls
Analysis and validation of AI solution usage
Cybersecurity Incident Management Information Security Security Measures Operational Security Governance, Risk & Compliance (GRC)
Ceres Partners
Information System Manager - PMO
January 2024 - December 2024 (11 months)
Use of EBIOS RM method for risk analysis
Operational Resilience
oIT risk analysis leading to business cessation
oStudy of solutions to ensure business continuity and recovery
oThird-party risk management
GDPR
oPersonal data processing
Integration of security into the project
oAnalysis of various web vulnerabilities (OWASP 10)
oSelection of security solutions to implement
oTeam training
PMO and Technical Assistance for Web Application Development
oRequirements gathering
oRFI / RFP
oWriting of specifications
oDefinition of KPIs for project monitoring
oTechnical assistance on the development of Binance APIs and trading strategies in Python
Operational Resilience ISP PMO Risk Management Risk Analysis
BNP Paribas
IT Security Engineer
BANKING AND INSURANCE
September 2021 - September 2023 (2 years)
Business Continuity:
oDORA Compliance
Understanding of DORA and its implications for financial institutions.
Gap Analysis and identification of discrepancies
oAnalysis of risks related to Information and Communication Technologies (ICT)
oReview of Business Impact Analysis (BIA)
oWork on operational resilience
oImplementation of business continuity and recovery plans
oTesting and validation of business continuity plans
oAutomation of processes related to business continuity
Crisis Management:
oOrganization of crisis exercises
oImplementation of crisis management teams
oParticipation in Bank of France crisis exercises
oMaintenance of the Everbridge application:
Weekly loading of contacts from all entities
Gap analysis to verify complete import
Troubleshooting errors (files, macros, etc.)
oContinuous improvement
oOverhaul of contact integration procedures to standardize processes between CIB and other entities
Phishing test campaigns and communication around Everbridge
Training of the Portugal crisis management team
Crisis Management Risk Analysis Operational Resilience BCP/DRP Training and Awareness