Freelancer profile translated to English.

Description

Information Systems Security Consultant (Governance Risk and Compliance) with nearly 5 years of solid experience. I am proactive on major topics: IS Security, compliance, business continuity, risk analysis and management. My professional experiences have allowed me to develop both technical and functional skills, enabling me to adapt to all contexts and have a better understanding of business needs as support. I have good analytical and synthesis skills and, above all, a strong team spirit.

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Rouen (up to 10km), Paris (up to 10km)

COVEA
IT Security Consultant
BANKING AND INSURANCE
September 2022 - Today (3 years and 9 months)
Paris, France
- Contribution, during pre-projects, to defining the security requirements of projects included in the roadmaps of Business Units;
- Support for MOA and Business Units in classifying personal and sensitive data;
- Risk analyses and issuance of recommendations to reduce these risks;
- Qualification of IT department suppliers and subcontractors with regard to cybersecurity and regulatory compliance requirements;
- Security support for technical and business projects related to data;
- Expression of cross-functional needs in terms of cybersecurity for the data scope;
Risk Analysis GDPR NIST Risk Management Data Lake Cloud ISP
I-TRACING
IT Security Consultant
DIGITAL AND IT
March 2022 - August 2022 (6 months)
Courbevoie, France
- Conducting GDPR audits;
- Conducting ISO 27001 white audits;
- Conducting risk analyses and issuing recommendations to reduce these risks;
- Support for ISO 27001 certification;
- Review of a client's policy and procedures;
- Definition and implementation of a resilience and incident response plan;
- Support in defining an IS Security Policy and an IT charter;
ISO 27001 GDPR ISMS Risk Analysis Audit IT Governance Risk Management
ZEROTRUST
IT Security Engineer
CONSULTING AND AUDITS
September 2020 - March 2022 (1 year and 7 months)
Saint-Denis, France
- Conducting GDPR, ISO 27001, and security audits;
- Support for implementing an ISMS,
- Support for implementing security governance,
- Definition and deployment of a awareness campaign
- Implementation and execution of recommendations at a client's site following an audit,
- Part-time CISO,
- Support in defining and testing DRPs,
- Implementation of a process within the IT department for the purchase and sale of services and products,
ISO 27001 GRC Risk Analysis GDPR Audit IT Governance ISMS DRP