Freelancer profile translated to English.

Description

Motivated and self-driven, I have over 12 years of experience in the public and private sectors, from technical to political. I have held various positions in France, Thailand, and Singapore (R&D, security, analyst, diplomat, Chief Information Security Officer, economic security).

I currently work as a Technical Advisor at the OECD to help developing countries and jurisdictions design and implement their Information Security Management System to ensure the confidentiality of financial and tax information.

This challenging position allows me to develop and increase my knowledge of the global cybersecurity landscape and gives me the opportunity to work in diverse cultural environments.

Therefore, I offer consulting services in the field of cybersecurity, as well as training and awareness programs in economic security, in French and English.

===================================================================

Motivated and self driven individual with 12+ years experience in public and private sector, from technical to political, I occupied various positions in France, Thailand and Singapore (R&D, Security, Analyst, Diplomat, Chief Information Security Officer).

I am currently working as Technical Advisor at OECD to help developing countries and jurisdictions to design and implement their Information Security Management system to ensure confidentiality while dealing with financial and Tax information.

This challenging position helps me develop and increase my knowledge related to the global cyber security landscape and gives me the opportunity to work with various cultural environments.

Languages

English
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 10km), Lille (up to 10km), Chambéry (up to 10km), Lyon (up to 10km)

OECD
Senior advisor - information security management
PUBLIC SECTOR
September 2020 - Today (5 years and 9 months)
Paris, France
Working for the Global Forum on Transparency and Exchange of Information for Tax Purposes (the Global Forum) within the OECD’s Centre for Tax Policy and Administration (CTPA) which is the focal point for the OECD’s work on all taxation issues, both international and domestic.

I aim to provide Technical Assistance and Capacity Building help to Tax administrations from 160 jurisdictions to provide Tax Administrations with:

- Trainings on Information Security Management and guidance on internationally recognized standards (ISO 27000 series)
- The ability to solve technical related issues, Information security design & implementation
- Tools to reach required confidentiality and data safeguards by AEOI (Automated Exchange of Information) and EOIR (Exchange of Information on Request) OECD confidentiality standards
- Maturity level to get assurance when going through their assessment process
- ISMS evaluations based on internationally recognized standards (ISO 27001, ...)

I am also part of the assessment teams in coordination with the Information Security Management experts panel that ensure the OECD requirements for exchanging tax information is properly understood, applied and ISMS follows internationally recognized standards and good practices such as ISO 27001.
ISO 27001 Cybersecurity Cybersecurity Governance Data Protection Officer Risk Management Training
Société Générale
Deputy global CISO
BANKING AND INSURANCE
October 2019 - October 2020 (1 year)
Paris, France
Deputy Global CISO for SGEF Holding and its 14 subsidiaries in Europe, US, Brazil and China (offices in 20 countries)

Governance
- Participate in the conception of global policies
- Ensure implementation by subsidiaries through local CISOs
- Monitor entities' security maturity levels through KPI / KRI
- Review / document / elaborate SGEF perimeter standards and policies
- Provide expertise and corrective actions

Regulations / Compliance
- Ensure/follow compliance (GDPR,...)
- Advise on risks related to applications / systems / infrastructures

Support
- Provide expertise and support to local CISOs
- Manage level 2 and 3 DLP events

Risk Management
- Assess Risks and Application security
- Advise on new product / technologies POC
- ITRM

Awareness / training
- Raise awareness, provide training
- Monitor PKI and relevant information
- Ensure Technical and security watch

DLP
- Ensure data protection application
- Monitor data leakage

Technologies / frameworks
ISO 2700x, NIST, DLP, Cloud, Classification, Web proxy
cyber security awareness training governance ciso
Ministère de l'Europe et des Affaires étrangères
Second secretary
PUBLIC SECTOR
July 2016 - September 2018 (2 years and 3 months)
Bangkok, Thailand
Political and economical analysis
Safety analysis