Abdeljalil AGNAOU

As part of Ayvens’ global cybersecurity team, I contribute to building a secure and compliant IT ecosystem following the merger of ALD Automotive and LeasePlan. My work focuses on designing resilient architectures, managing cyber risks, and supporting the secure adoption of AI across business units. Key responsibilities and achievements: - Conducting cyber risk assessments and ensuring project compliance with ISO 27001 and NIST standards. - Designing and recommending secure architectures for the new shared IT target system. - Overseeing security compliance, managing audit findings, and driving remediation plans. - Supporting the deployment of the group’s target cybersecurity operating model (aligned with Société Générale standards) and contributing to continuous improvement. - Advising business teams on AI and GenAI initiatives, assessing the security of AI integrations, and defining AI-secured architectures. - Evaluating AI project compliance with internal policies, international standards (NIST AI RMF, OWASP Top 10 for LLMs, EU AI Act), and best practices for public AI usage.

- Security support for strategic projects : LPM (Loi de Programmation Militaire), CSP SWIFT (Customer Security Program). - Expertise in Micro-segmentation and filtering services, orchestration and definition of methods for labeling assets but also to simplify native segmentation of infrastructures. - Security architecture design of the projects implemented in the On-premise and Cloud native IBM environments. - Risk Analysis and evaluation of security measures in response to the regulatory security requirements. - Urbanization of the information system of the BNPP as well as its branches and modeling of security measures. - Analyze and compliance of HLD/LLD documents to cybersecurity standards of the group for innovation projects.

- Contribution to the LPM project Team by providing expertise on different topics related to the business applications and the systems impacted by LPM Regulation (SIIV); - Risk Assessment and Risks mitigations; - Description of technical solutions to meet the needs of application security and regulatory requirements; - Technical Security Architecture expertise (Pentests, Risk Analysis, IAM, Network Security,...); - Applications cartography; - Network segmentation including micro-segmentation tools like illumio; - Logs collection and definition of suitable uses cases (MITRE Framework) for correlation within PDIS SOC; - Infrastructure hardening following different referentials (CIS, DoD, etc ...) - Definition of suitable security models and solutions to ensure compliance to regulator requirements;

- Firewalls deployment and implementation in a complex Datacenter architecture; - Monitoring of Network security by Maintaining and ensuring availability and integrity of systems; - Ensure that the platforms and tools of the company are secured and well-protected; - Design and Develop tools and services that securely enabling end-user productivity and system integrations; - Network Segmentation and Partitionning of Datacenter networks, Flow matrix identification of business applications; - High Level design, Low Level Design documentation;

- Bank’s Information Security Policy development - Design, implement and deliver network security solutions - Develop and maintain information security policies as needed to maintain the data security of the client enterprise. - Analyzing, troubleshooting and correcting network problems remotely and on-site. - Maintaining and administering perimeter security systems such as firewalls, IDS and Endpoints : Palo Alto Networks, Fortinet, Sophos, Check point, ... - Develop security strategies, architectures and security requirements based on the business needs of the customers. - Interface and respond to escalated incidents from the managed services partner performing SOC monitoring.

- Lunching the Morocco Honeypot Project - Design of an intelligent algorithm to reduce positive and negative falses from Honeypots/IDS captures based on AI

- Seucity penetration testing - Vulnerabilty Analysis and Identification of business impact - Reporting of findings to technical staff and to the management alike