Yasmine E.

Support for the implementation project of the ISMS and carrying out the internal ISMS audit of information security, operational support on-site for obtaining ISO/IEC 27001:2022 certification. Support for deliverable production.

Result: ISO 27001 certification obtained.

Contribute to the implementation of TAQA group's risk management policy and associated standards defining risk management rules within the company. Control the power plant's risks and ensure the risk register is updated through the identification of potential and emerging risks, risk analysis and assessment, their prioritization, and the identification and assessment of risk control systems. Develop risk treatment strategies and monitor their implementation. Measure the effectiveness of the risk treatment plan. Collaborate with business and functional teams to support business continuity planning (critical processes, products, sites, routine operational sites, and sites subject to risk conditions). Lead the development and implementation of crisis and business continuity management exercises, ranging from theoretical exercises to complex in-person scenarios.

Participate in defining the budget for the Audit and Risk Department; Structure the internal audit function and the internal control function; Structure the risk management function; Contribute to the continuous improvement of the SAFIEC management system; Master the risks of the SAFIEC ultra-supercritical thermal power plant and ensure the updating of the risk map through: Construct the annual internal audit program and the annual internal control program and carry them out in accordance with ISO 19011; Prepare deliverables for the Risk and Audit Committee; Participate in the ISO 45001 and ISO 14001 certification project; Conduct an ISMS audit according to standard 27001; Manage the project for implementing SAFIEC's Business Continuity Plan (BCP) and participate in testing; Train SAFIEC teams on HSE culture modules; Leader of the HSE culture transformation project: working group on incident investigation and analysis; Point of contact for external auditors, statutory auditors, and the Moroccan Agency for Energy Efficiency (AMEE).