Freelancer profile translated to English.

Description

IT Risk & GRC Consultant, I support organizations in structuring their security governance, IT risk management, and regulatory compliance.

I work on missions such as:

IT risk analysis and mapping (ISO 27005, EBIOS RM),
Implementation or strengthening of IS security governance,
Scoping and deployment of regulatory frameworks (DORA, NIS2),
Support for CISOs, Risk Managers, and IT teams in regulated environments.

With over 14 years of experience in critical environments (banking, transport, telecoms), I am accustomed to working in complex contexts requiring rigor, coordination, and a transversal vision.

Industry field of expertise

Languages

French
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km), Lyon (up to 10km), Lille (up to 10km)

BNPP CIB
SI Security & Governance Architect
BANKING AND INSURANCE
November 2022 - Today (3 years and 9 months)
Paris, France
Context

Mission within a critical banking environment, with strong stakes in security governance, IT risk management, and regulatory compliance.

Interventions

IT risk analysis and mapping for projects and existing applications
Definition and validation of security requirements in IT projects
Validation of secure architectures
Contribution to IS security governance and security committees
Interaction with CISO, IT, Risk, and Business teams

Value Delivered

Enhanced IT risk control and contribution to regulatory compliance in a complex banking context.
IT Risk Management Risk Analysis IT Regulatory Compliance IT Project Security GRC
SNCF GROUPE
❖Cybersecurity Consultant – Governance & Operations | SNCF Group
April 2020 - October 2022 (2 years and 6 months)
Paris, France
Context

Cybersecurity mission within a critical transport information system, with major stakes in availability, operational resilience, and IT risk management, in a highly constrained environment.

Interventions

Management of sensitive flow and access validations in critical application environments
Analysis of IT risks related to flows, access, and application architectures
Contribution to IT project security (security by design)
Participation in the definition, writing, and updating of security policies, standards, and requirements, in line with regulatory and internal frameworks
Participation in security crisis cells and support for major incident management
Conducting cyber-resilience studies on critical application chains
Interaction with IT, security, and CISO teams in a multi-stakeholder context

Value Delivered

Enhanced IT risk control and resilience of a critical IS, with a pragmatic approach balancing security requirements, service continuity, and operational constraints.
ISO27005, EBIOS RM, ISO27001,NIS2 , Security Architecture Cyber-resilience IT Risk Management
ARVAL
Security & Networks Consultant
TRANSPORTATION
November 2016 - March 2020 (3 years and 4 months)
Paris, France
Context

Mission in an international environment, with strong stakes in infrastructure availability, operational security, and service continuity.

Interventions

Operation and security of network and security infrastructures
Contribution to network and security architecture evolution projects
Management and analysis of security incidents in coordination with IT teams
Implementation and monitoring of security rules (flows, access)

Key Contribution

This experience provides a solid technical foundation, on which my pragmatic approach to governance and IT risk management is built today.
IT Infrastructure Network Security Loadbalancing IPS/IDS WAF