Abdessamad ELAM

Manage and maintain the information security system and identify gaps. Align information security governance framework with organizational goals and objectifs. Restructure the ISMS framework to align with ISO27001:2022 Project manager of the transition from ISO 27001:2013 to 2022 version of ISMS Understand standards, procedures, directives, policies, regulations, and legal issues that affect the information security program. Create and maintain the risk assessment and treatment plan. Annual Update of group risk register. Propose information security strategies, plans, policies, and procedures to reduce regulatory risk. Design and implement information systems controls to mitigate risk. Monitor and document the information systems control performance in meeting organizational objectives. Assess and implement tools and techniques to automate information systems control processes. Create and apply vendor security management framework on new critical vendors. Understand the IT audit process and be familiar with IT audit standards.

Implementation of Vulnerability Scan Tool (Rapid7) Implementation of Network Security & Automation tool (Skybox - Tufin)

- Identify risks and define the security policy, - Guarantee the security of developments, define training and set up a communication plan, organize code reviews, - Analyze risks, identify areas for improvement and manage associated action plans, - Operational security management and audits, intrusion tests and certification audits, implementation of internal security solutions, - Support for the implementation of the Business Continuity Plan (PCA, PRA, PSI) - Supplier security management and risk assessment, - Monitoring and verification of security controls to be designed and operated effectively, - Drive the security culture by supporting all awareness campaign initiatives. - Ensure that all security-related guidelines, policies, standards and procedures comply with AXA Group requirements and ISO27001 standards - Simplification, standardization and automation with an Agile mindset. - Vulnerabilities and Patch Management - Security Application Audit

L2 SOC Analyst: -Performed Deep Investigation and Incident Response on security incidents . -Performed Dynamic Malware analysis of malicious files and malwares detected. -Investigated suspicious/malicious activity and reported phishing emails . -Conducted Proactive Threat Hunting exercises. -Continuously improved detection rules and use-cases . -Endpoint Security monitoring and Whitelisting/Blacklisting . Cybersecurity Consultant : -Conducted Vulnerability scanning and risk assessment on internal projects and assets . -Proposed Vulnerability remediation and followed up with stakeholders on the improvement of security posture . -Performed Application security Audits and proposed remediation to reduce their security risk . -Performed risk assessment on all firewalls rules and change requests . -Designed and Implemented a global Firewall Audit process and Operational guide for Bouygues-Construction and it's subsidiaries , based on the ISO 27001 Standard. -Conducted a global Firewall Rules Audit and delivered a detailed report on findings and proposed improvements on the Firewalls rules .