Sofiane Boukhris

End-to-end project management (Scoping → Build → Run) of critical projects integrating security, compliance, and resilience: Steering/Working Committee governance, multi-team dependency management, CI/CD & DevSecOps delivery pipelines, and definition of the RUN/AMS operational model under SLA, with DR/BCP integration and Cloud, Data & AI requirements.

Objective: Deploy a secure and sustainable group intranet with SSO/Active Directory, GDPR/ISO 27001 compliance, secure CI/CD, and RUN/AMS excellence.

Governance & Management: Full scoping (vision, scope), RAID, RACI, and CCB management; IT/Subsidiary/Security/HR communication plan; critical path mastery, macro-planning, budget, milestones, and go/no-go criteria. Implementation of RUN/AMS: SLA, escalation process, DR/BCP, capacity planning, monthly reviews.

Key Deliverables: Scoping document (structure, roles, SSO/AD authorizations), Jira backlog (US, DoR/DoD), functional specifications on Miro; target architecture (React/Next.js, NestJS, PostgreSQL), GitLab CI/CD pipelines (SAST/DAST), deployment/rollback runbooks, weekly and monthly management dashboards.

Indicators Tracked: velocity, lead time, milestone adherence, deployment success rate, defect density, MTTR, SLA compliance, SAST/DAST vulnerabilities, and remediation rate.

Technologies: Jira, Miro, GitLab CI/CD, React/Next.js, NestJS, PostgreSQL, SSO/AD, Cloudflare WAF, ELK/Grafana observability.

Management of a strategic digital program for a leading automotive leasing company, covering automation, data unification, and AI integration:

- Next-generation Leasing Comparator: automation of multi-manufacturer/financier data collection and normalization, intelligent comparison engine, AI enrichment (RAG) within a fully secured CI/CD pipeline.

- Regulatory Business Module: automated processing of sensitive calculations, complete traceability, auditability, and harmonized integration into internal processes.

Governance & Management: program roadmap construction and execution, dependency & critical path management, budget and capacity management, coordination of a product squad (4 devs, 1 PO, 1 QA), agile rituals, reinforced quality & security control, structured executive reporting.