Freelancer profile translated to English.

Description

With 16 years of experience in large corporations (AXA, Covéa, BPCE, Capgemini), I support IT Directors and CSOs/CISOs in securing their hybrid IT systems, risk governance, and regulatory compliance (DORA, NIS2, GDPR, PCI-DSS).

What I bring:

• End-to-end security architecture: Zero Trust, Landing Zones, IAM/PAM, DevSecOps

• Multi-provider cloud security: Azure (AZ-500), AWS, GCP — governance, SecNumCloud compliance

• AI Security: AI risk management, OWASP Top 10 LLM/MCP/RAG, Agentic AI, Guardrails

• GRC & Compliance: DORA, NIS2, ISO 27001/27005, PCI-DSS, GDPR, TPRM

• OT/IoT: Building/Home automation and video surveillance infrastructures

Recent missions:

→ AXA GIE: Security by Design, Privacy by Design, Architecture, Risk Assessment, VRF (Vendor Risk Framework), cloud security (Azure/AWS/GCP)

→ Covéa: Design Authority, cloud transformation, PCI-DSS payment systems overhaul

→ BPCE Assurances: IT Security remediation program (6 workstreams: IAM, PAM, hardening, SOC)

Available for freelance missions — France & international (FR/EN/IT)

📩 |

Industry field of expertise

Languages

French
Native or bilingual
Italian
Native or bilingual
English
Fluent

Workplace preferences

Can work on-site

Paris (up to 50km)

GIE AXA
Security & Cloud Architect
BANKING AND INSURANCE
October 2023 - Today (2 years and 10 months)
Paris, France
My missions within AXA GIE:
Ensure architecture compliance within the Design Authority (Security by Design, Privacy by Design)
Challenge architects and technical experts in various project scopes
Support project stakeholders in integrating security into projects
Provide operational support to CISO teams on technical expertise topics in BAU phase
Actively contribute to defining secure architecture patterns within the group
Contribute to the VRF (Vendor Risk Framework) activity by assessing the security maturity level of service providers and integrating security clauses into contracts
Contribute to and promote a cloud security vision and policy (Azure, AWS, and GCP)
SKILLS: ARCHITECTURE, DEVSECOPS, NETWORKING, INFRASTRUCTURE (VM & CONTAINERIZATION), AZURE, AWS, GCP, AI SERVICES, RISK MANAGEMENT, CYBERSECURITY, IAM, PAM, ZERO TRUST, GDPR, DORA, TPRM, COACHING
Architecture Cybersecurity Risk Analysis Cloud Computing IT Vendor Management and Procurement
COVEA
IT Architect - Risk Management for Technical Obsolescence
BANKING AND INSURANCE
June 2020 - July 2023 (3 years and 1 month)
Le Mans, France
My missions within Covéa:
Ensure architecture compliance within the Design Authority
Active contribution to defining secure architecture patterns within the group
Management of the Application and Technical Component Catalog of the portfolio
Management of risks related to technical obsolescence
Overhaul of the online payment systems architecture for Covéa group brands
Definition of the architecture for implementing payment terminals in Covéa agencies
Overhaul of the self-service password recovery system for standard and administrator users via One Identity Password Manager
Overhaul and security enhancement of Building/Home automation and video surveillance infrastructures for Covéa sites
SKILLS: ARCHITECTURE, DEVSECOPS, NETWORKING, INFRASTRUCTURE (OPENSHIFT & VM), IT GOVERNANCE, OBSOLESCENCE, CYBERSECURITY, RISK MANAGEMENT, GDPR, PCI-DSS, PROJECT MANAGEMENT, CLOUD, SERVICENOW(CMDB), CONFLUENCE, JIRA
IT Architecture Cybersecurity IT Governance PCI DSS GRC
Harmonie Technologie
Cybersecurity Architect
DIGITAL AND IT
October 2018 - September 2019 (11 months)
Paris, France
Project: Implementation of a digital platform for cybersecurity risk prevention -
A project leveraging internal cybersecurity expertise (GRC, Pentesting, Phishing Campaigns, Quizzes, and Awareness Content)
My involvement in the project:
Transversal coordination of internal and external activities
Management of activities and billing with external partners
Definition of the overall technical architecture
Risk analysis for the project
Definition of the functional mapping and usage scenarios of the platform by different stakeholders
Definition of the project roadmap (Iterative approach, project organization, key milestones)
Definition and implementation of the architecture on different environments (Testing, Acceptance, and Production)
SKILLS: IT ARCHITECTURE, CYBERSECURITY, PENTESTING, PROJECT MANAGEMENT, TEAM MANAGEMENT, SERVICENOW
Project Management Team Management Cybersecurity IT Vendor Management and Procurement Risk Analysis