Sarah H.

Having assisted several organizations with cybersecurity, governance, and compliance in various sectors (banking, insurance, human resources, etc.), I can help you strengthen your security level and meet your regulatory and normative requirements.

I intervene particularly on issues related to DORA, ISO 27001, ISO 27005 compliance and risk management using the EBIOS RM method, in order to define security measures adapted to your context and your business challenges.

I also have solid expertise in Third Party Risk Management (TPRM), including supplier risk assessment, critical third-party management, security questionnaires, compliance reviews, and follow-up of remediation plans in regulated environments.

What I can bring you:

Definition of your cybersecurity strategy and IS security governance.

Writing and updating security policies, procedures, and frameworks.

Support for regulatory and normative compliance (DORA, ISO 27001, etc.).

Management of ISO 27001 certification processes.

Conducting risk analyses according to EBIOS RM and ISO 27005.

Management of risks related to third parties and suppliers (TPRM).

Assessment of the cybersecurity maturity of critical service providers and suppliers.

Monitoring of risk treatment plans and security action plans.

Integration of security into projects and operational practices.

Awareness and support for teams on cyber and compliance issues.

Available to discuss your issues and projects in complete confidentiality, in order to identify concrete areas for improvement and provide you with real added value.