Alain Bounaud

Implementing ISO27001 processes by managing the Weekly Architecture & Security Committee for Business and IT projects of the tribe (150 applications): • Security Assessments & Integration of security into projects • Risk management (GRC): Continuity, Security, Data Integrity, Change Management, Third Parties • Implementation of ISO 27001, GDPR, DORA requirements: vulnerabilities, penetration testing, operational resilience • Third-party evaluation (TPTRM) through monitoring of Security Assurance Plans (PAS) • Response to security audit controls from the Group’s General Inspection (BNP Paribas) • Annual review of critical applications Tools: ServiceNow / Jira / Code audit: Fortify, Sonatype, Qualys

Managing the Cybersecurity Program : Compliance of security controls evidences - Scope Management of 160 applications - Produce Application Security Baselines: Create, Document and Implement processes for : Identity & Access Management Resilience Management Vulnerability/Patching/Life Cycle Cryptography Management Data Leakage Prevention Malware Resilience Management Technical State Compliancy Monitoring Interconnectivity and External Connection Management Preparing & animating - Project committee: bi monthly, for the different actors of the projects (Stream Leaders, IT Area Leaders, IT security) - Steering committee: monthly for ING CIO - CIO committee: monthly with ING Group other countries CIO

Managing the migration of database servers to a new cloud infrastructure PAAS : - Implement a cloud service PAAS for the migration of Database systems on a mutualized platform - Lead the impact study of migration of 220 applications - Plan the operation of migration on 2018 - Decide the converged infrastructure provider among three RFP offers - Control a budget over 2 M€ for migration operations - Prepare and animate Project Committee for migration follow up and deployment

Lauching of a new team “Control Tower” for IT incident reduction : - Conduct Problem management in a banking IT production environment (300 Applications / 3000 servers) - Define and Manage the implementation of IT perennial solutions - Define and follow up of KPIs - Coordinate technical teams to ensure contracts commitments and quality assurance of customer services - Do Regular reporting to the head of IT - Themes: Process Creation / Change Management / Monitoring / Backups / Filesystems / Scheduler / DRP

System Integration Transport & Securiy on LTE « System Test Engineer» - Specification analysis of Transport&Security Features: IPSec–Plug&Play-Traffic Shaping-eUTRAN Sharing-Synchronisation 1588 - Elaboration and execution of test plans - In case of bugs, CR (Change Request) Creation & Follow up - Direct Contact with development teams in US, Germany & Romania. - Contact with fortinet for the integration of their security gateways within the network - Contact with Mera for the integration of their Certificate Management Server within the network - Give the Go/NoGo for delivery of the features in the product release On the technical plan : - Servers Configuration: DHCP, NTP, DNS, CMS (Certificate Management Server) ‘Mera’ - Installation & Configuration of Security Gateways Linux & Fortinet - Ipsec tunnels establishment using psk (PresharedKey) & certificates - Creation of network architecture & address plan - Networks Supervision using tools based on SNMP protocol - Study & System Integration of Plug&Play Solutions - Trafic shaping for performance optimization and bandwidth improvement - Cisco Certification: CCNA On Communication & Marketing plan : - Direct Contact with development team for the amelioration of the product quality - Point of Contact with Fortinet & Mera for solutions of bugs in their products.

Project Management for deployment of voice and data solutions « Project Manager » - Launch, Follow up and delivery of data and voice projects - Coordination between different teams (SFR, Subcontractors, France Telecom) - Regular Contact with clients (Management of more then 50 projects at the same time).

Presales for Mobile Networks Services. « Assistant Service Solution Manager – Assistant Bid Manager» - Elaboration of commercial proposals particularly for a many million Euros RFQ - Regular Contact with the decision makers of company’s big deals - Sales process from strategy definition to project delivery - Participation in the creation of a partnership

Routers, Switches and PBX configuration