Freelancer profile translated to English.

Description

Information systems engineer, I have been working in security for six years. Cybersecurity consultant, Deputy CISO, CISO, Group CISO — in six years I have skipped steps, moving from the field to governance without lingering.

Today I offer three types of services:

- CISO as a Service — for organizations that need a structuring CISO without hiring full-time. I take care of the security policy, risk analysis, committees, awareness training, and executive reporting. I have done this in very different contexts: software vendor, international multi-entity group, regulated environments.

- Audit & Compliance — ISO 27001, PCI DSS, GDPR. I can both conduct audits and assist in implementing corrective actions. Certified ISO/IEC 27005 Risk Manager.

- Cyber & IT Consulting in M&A context — this is a specialty I developed at Volaris Group, where I participated in target assessments, cyber due diligence, and post-acquisition integration. It is an area where few freelancers have real operational experience.

I work remotely, available for long-term assignments as well as one-off interventions.

Languages

French
Native or bilingual
English
Native or bilingual
Spanish
Basic
Chinese
Basic

Workplace preferences

Remote only

Primarily works remotely

Volaris Group,
Group CISO
SOFTWARE PUBLISHING
January 2025 - April 2026 (1 year and 3 months)
Europe
• Definition and management of the group cybersecurity strategy across a multi-entity portfolio
• Management and coordination of 7 local CISOs, with harmonization of security policies and practices
• Management of global programs: SOC, major incident management, crisis management, BCP/DRP
Integration of cybersecurity into the M&A cycle (pre-closing and post-acquisition) to manage acquisition-related risks
• Analysis of technical debt and IT investments, and assessment of their impact on risk and net debt
• Facilitation of cross-functional workshops (IT, R&D, M&A) to align cybersecurity with business objectives
CISO IS Strategy Mergers & Acquisitions Compliance Team Management
4JS (Volaris Group),
CISO
SOFTWARE PUBLISHING
January 2024 - January 2025 (1 year)
Strasbourg, France
• Development and implementation of the cybersecurity strategy
• Establishment of risk management and security governance frameworks
• Organization and facilitation of security committees with stakeholders
• Deployment of awareness actions and security maturity improvement
• Identification and reduction of risks through the implementation of appropriate controls
Risk Management IS Strategy Team Management Compliance Risk Analysis
Arcad Software,
Deputy CISO
SOFTWARE PUBLISHING
January 2020 - January 2024 (4 years)
Annecy, France
• Deployment and maintenance of security policies across the company
• Management of cybersecurity projects (technical and organizational)
• Contribution to ISO 27001 compliance initiatives
• Design and implementation of a Business Continuity Plan (BCP)
• User awareness training and improvement of security maturity
Compliance Customer Satisfaction IS Strategy Risk Analysis ISO 27001