Freelancer profile translated to English.
Back to original languageAbout Reda
Cybersecurity consultant with 10 years of experience, including 3 years at La Banque Postale providing direct support to CISOs. Specialized in cyber governance and strategy, risk management and assessment, and regulatory compliance for critical assets. Accustomed to complex environments and sensitive contexts, I have served as a CISO backup, participated in crisis cells, and contributed to an industry-wide crisis exercise led by the Banque de France. Open-minded, collaborative, and proactive, I wish to leverage my expertise and knowledge of the Group to contribute to enhanced and sustainable cybersecurity.
French
Native or bilingual
English
Fluent
Spanish
Conversational
Can work on-site
Paris (up to 50km)
Experience
- BpifranceCybersecurity ExpertPUBLIC SECTOROctober 2025 - Today (10 months)Paris, France• Security support for business unitso Identify risks inherent in each product (AI, SaaS, or internally developed)o Issue recommendations to help teams mitigate these riskso Issue security opinions on RFPs, POCs, contracts, etc.• Cyber maturity assessment and global review of Cyber processes under the responsibility of the MRB team
- La Banque Postale Groupe - SiègeCybersecurity ExpertBANKING AND INSURANCEOctober 2022 - Today (3 years and 10 months)Paris, France• Security support for business units, MOA, and C/CISOs (service offering)o Analyze project security needso Verify compliance with ISPS, notes, and points of attentiono Participate in working meetings or steering committeeso Organize monthly follow-up committees with CSSIs and draft minuteso Advise business units on organizational aspects related to SSIo Provide an opinion on risk analyses (EBIOS RM), escalate alerts to concerned CISOs if necessary...• MOA Security Management - DevSecOps project:o Define security requirements related to development securityo Collect and formalize security needs for projectso Coordinate with the development team for budget estimationso Monitor security actions in project committees, organize and lead steering committees• Drafting and Updating policies under the responsibility of the B2C team, including:§ Risk Management Policy in Projects§ Security Risk Management Policy for Outsourcing§ DevSec Policy§ Cloud Policy§ Security Assurance Plan (DORA compliance)§ Email Whitelisting Management Policy§ Non-standard Flow Management Policy• Risk Management Expertise:o Dual review and validation of security risk analyses conducted by projectso Contribution to product review committees and outsourcing committees for issuing security opinionso Instruction and processing of security derogations.• Governance:o Management of the B2C team transformation projecto Raising awareness among project teams and management on SSI issueso Development of dashboards and reporting for monitoring compliance and risks
- EnedisPortfolio Manager / Cyber Analyst (Formind)November 2021 - October 2022 (11 months)92400 Courbevoie, France• Perform SSI integration activities in projects (ISP).• Conduct risk analyses, monitor compliance, derogation requests, and changes.• Provide upstream support to projects on security topics, particularly by assisting with the contractual scope of the PAS, assessing SSI risks, and developing templates and secure architectures with architects.• Provide project stakeholders with information on security measures to be respected.• Offer functional and/or technical information security expertise that is understandable to all, throughout the project lifecycle.• Respond to the growing cyber challenges and issues within Enedis by implementing and delivering a leading, continuous, and commitment-driven service.
Recommendations
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Two-year degree, Computer Systems Networking and TelecommunicationsIUT (University Technology Institute)2013Two-year degree, Computer Systems Networking and Telecommunications
- Engineer's degree, Industrial System EngineeringPolytech Angers - Engineering School of the University of Angers2016Engineer's degree, Industrial System Engineering
Certifications
- ISO/IEC 27005 Risk ManagerPECB2019
- EBIOS Risk ManagerPECB2019