Soufiane Bouasria

Performed level 2 continuous controls (LOD2) on IT and Cyber risk policies within the framework of ISO27001 requirements. Designed and implemented compliance monitoring dashboards for real-time IT security management for the technical department (systems, networks, security tools). Provided expertise to IT security governance: detailed analysis of IT risks and definition of responses adapted to compliance requirements (ISO27001). Produced IT security dashboards: compliance indicators and security KPIs — regular reporting to management. Supervision: Grafana, Centreon, Zabbix. Operational processing of requests, alerts, and exceptions related to the CISO. Conducted internal audits and formalized control reports. Implemented and monitored security policies, procedures, and standards (ISO27001). Managed incident response plans and BCPS. Integrated cybersecurity tools: Wazuh (SIEM), Firewall, Sonarqube — control automation. Deployed an OVH secure architecture compliant with ISO27001 and participated in setting up an SOC. Maintained operational condition of the infrastructure, on-premise and Cloud: OVH, Azure, OS: Linux, Windows.

Performed level 2 continuous controls (LOD2) on IT and Cyber risk policies within the framework of PCI DSS and GIE CB requirements. Designed and implemented compliance monitoring dashboards for real-time IT security management for the technical department. Provided expertise (systems, networks, security tools) to IT security governance: detailed analysis of IT risks and definition of responses adapted to compliance requirements (PCI DSS, EBIOS RM). Produced IT security dashboards: vulnerability monitoring (Qualys), compliance indicators, and security KPIs — regular reporting to management. Managed and operationally executed the Cyber awareness plan: created materials (slides, posters) and led training/workshops for teams. Operational processing of requests, alerts, and exceptions related to the CISO. Conducted internal audits and formalized control reports. Implemented and monitored security policies, procedures, and standards (PCI DSS, GIE CB). Managed incident response plans and BCPS. Integrated cybersecurity tools: Qualys (vulnerability management), Wazuh (SIEM), Firewall, Sonarqube — control automation. Deployed an AWS secure architecture compliant with PCI DSS and participated in setting up an SOC. Maintained operational condition of the cloud infrastructure: AWS, OS: Linux.