Abdelmalek NAJIH

▪ Conducted certification Audit on behalf of MSECB for a fund management entity in Luxembourg. ▪ Conducted ISO 27001 LA, ISO 22301 LA and ISO 42001 LI certification training.

▪ Acted as ISO 22301 Lead Implementer for POST Technologies, supporting the organization throughout its BCMS certification journey and successful achievement of ISO 22301 certification. ▪ Reviewed and validated the deliverables produced by the external consulting team to ensure alignment with ISO 22301 requirements. ▪ Provided guidance and support across all project phases, including BCMS implementation, testing and exercising, internal audits, corrective action management, team preparation, and certification readiness activities.

THREAT INTELLIGENCE ▪ Implemented and coordinated the Threat Intelligence program for the Group. ▪ Orchestrating the Threat Intel reporting and treatment with Teams in USA, Mauritius and Philippines. IT SECURITY COMPLIANCE ▪ Managed compliance activities across 26 jurisdictions of IQ-EQ in 23 Countries. ▪ Conducted Internal Audit as preparation of the ISO/IEC 27001certification annual review and recertification. COMPLIANCE with CSSF circulars ▪ Conducted due diligence for Third Party solutions providers and coordinated Pen-Test of solutions when needed with the Red Team. ▪ Conducted materiality assessment for 3 entities of IQ-EQ Group in Luxembourg ▪ Maintained IT Cloud outsourcing register ▪ Supported regulatory readiness for CSSF inspections

▪ Managed a Teams of 6 external consultants during the implementation of the ISMS Documentation ▪ Conducted awareness for 200+ employees ▪ Coordinated remediation of 150+ audit findings.

▪ Established the Risk Management Approach and the risk register. ▪ Conducted workshops for 20+ departments to build the assets inventory and collect the information security needs ▪ Reported the progress, outcomes, issues and suggested solutions to the Executive Committee during the monthly Security Council.

Conducted Training in France and Morocco on behalf of ▪ ABCIT to deliver training for Professional Masters at IPI Paris, IPSSI, ITESCIA, YNOV & AFTI. ▪ Skills-Campus to deliver ISO 27005 RM certification training. Conducted consulting missions in Cameroun, Mauritania and Morocco on behalf of DataProtect for 8+ clients: ▪ Implemented and Audited clients ISMS in conformity with ISO 27001 and ISO 27002. ▪ Conducted Risk Management in conformity with ISO 27005 using EBIOS. ▪ Led Readiness program to comply with loi 09-08 (for Personal Data Protection).

Conducted consulting missions for 18+ clients ▪ Implemented and Audited clients Management Systems in conformity with ISO 27001 and ISO 22301. ▪ Conducted Risk Management in conformity with ISO 27005 using EBIOS ▪ Conducted security assessment and Pen-Test using the CEH technics (BlackBox, GreyBox and WhiteBox for Internal and external Audit). ▪ Handling Incidents using ISO 27035 guide for IS security incidents, and ITILv3 for general IT incident of the internal Information System. ▪ Conducted Malware Analysis and computer malwares' cleaning.

Senior IT Support Analyst – Bombardier Aerospace Account (via Dell) ▪ Provided IT operations and service desk support for a global aerospace environment for 10+ sites in America, Europe, Africa and Asia in collaboration with teams in Canada and Peru. ▪ Administered enterprise platforms including Active Directory, SAP, SCCM, Windows Server, Office 365, Tivoli Identity Manager, BitLocker, Lotus Notes, and Lync Server. ▪ Managed incidents, service requests, access provisioning, and application support using ServiceNow and ITIL processes. ▪ Supported 30+ business-critical systems and technology environments while ensuring service quality and operational continuity.

▪ Conducted Pen-Test and security assessment for clients. ▪ Developed IT Security documentation (Policies, Procedures, guidance... etc.). ▪ Conducted gap analysis to define action plans to comply with the ISO 27001 requirements ▪ Delivered Awareness sessions & Trainings for client personnel. ▪ Implemented IT solutions for clients. ▪ Provided IT Support for clients.

TUI Fly Morocco: ▪ Ensured onsite IT Support for the head quarter and the call center. Mars Morocco: ▪ Handled the Migration from windows XP to windows 7 for 20+ users machines ▪ Installed and configured CCTV

Final Project Thesis: Penetration testing using CEH v7 technics. Tools: Metasploit, Jerix, Nmap, Nessus, Caïn & Abel, Netsparker