Freelancer profile translated to English.

Description

I am Vanessa Honfo, a graduate general engineer from ESIGELEC (specializing in Networks and IT Security) in 2018 and have been a cybersecurity consultant since then. I have acquired solid experience over 7 years in cybersecurity consulting, both in a startup environment (Master Data Solutions) and within a large group (Accenture, formerly Linkbynet, then Capgemini).

Curious, with a real sense of analysis and a strong consulting posture, I have worked on several technical missions, then specialized in GRC (Governance, Risk, Compliance) since 2022.

I am available for your compliance needs (evaluation, audit, remediation) regarding frameworks/standards, security integration in projects, risk analysis, and any other missions related to maintaining security, and cyber project management.

For technical missions, do not hesitate to think of me if you need support on vulnerability management (scans, tracking, remediation), SIEM implementation, BIA/DRP approach, as well as architecture security reviews.

I am rigorous in my work, which allows me to achieve my goals.

Looking forward to working with you!

Languages

English
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 50km)

CAPGEMINI
Cybersecurity Consultant
LUXURY GOODS
November 2024 - Today (1 year and 7 months)
Supplier risk management
Critical asset identification
Cyber risk analysis
Compliance with DR and Group audit requirements
CLIENT SECTEUR LUXE
GRC Advisor
November 2024 - Today (1 year and 7 months)
Evaluation of the division's Cyber maturity (Coordination, evidence collection) Management of third-party Security risks (Supplier security assessments and remediation tracking, documentation of local processes) Compliance control with applicable regulations (NIS 2, ISO 27002, etc.) Business continuity: coordination and planning of actions concerning business continuity and disaster recovery plans Assurance of compliance control with security policies and standards
ACCENTURE
Cybersecurity Consultant TRANSPORT SECTOR CLIENT
October 2022 - October 2024 (2 years)
Security in projects End-to-end security monitoring for about fifty applications Realization of project pre-qualification by classifying data according to DICT criteria Monitoring of functional security requirements resulting from pre-qualifications Risk analysis for projects pre-qualified as critical Analysis of the impact of CVEs identified during vulnerability scans (xray, casthighlight) Processing of derogation requests for PSSI rules and flow opening requests SSI advice on technologies, protocols, tools, or means to be implemented in IT department projects Analysis and evaluation of bidder security assurance plans (PACS) Monthly monitoring of CVEs with technical stakeholders for each tribe and their remediation