Ali Wakrim

As CISO Advisor, Expert or Security Officer I Led and delivered DevSecOps and security transformation engagements for enterprise and scale-up clients across multiple industries (Technology, SaaS organizations, Digital Platforms, Banking, FinTech, Logistics, etc.): - Defined and executed DevSecOps strategies covering governance, operating models, policies&processes, tooling with high stake of adoption across complex, multi-entity organizations. - Facilitating the development, operationalization and adoption of security strategies, governance, processes and tools towards executive and operational stakeholders (CISO, CTO, CIO, Business Leaders, Sales, Legal, Development and IT teams,...). - Design of security governance and operating models tailored to the organization (roles and responsibilities, committee structures, KPIs, dashboarding, etc.). - Designed Secure Software Develeopment Lifecycle (SDLC) to seamlesly integrate security activities, tools and processes into development projects (threat modeling, sast/sca/dast/pentest, vulnerability management, kpis and dashboardings,..). - Built and scaled Security Champions programs to drive cultural change, decentralize security ownership, and accelerate secure-by-design practices across delivery teams. -Embedded security as a core product capability within digital and SaaS platforms, ensuring security is treated as a business enabler rather than a control function.

Main projects: • For a major financial institution, definition of DevSecOps target operating model (TOM) based on Security Champions model • Organisation of a Group-wide RFP for the selection of SAST and SCA tools adapted to a DevSecOps and Security Champion organization model • Within MoveToCloud program for a major banking institution, define & implement security / DevSecOps projects to secure the MoveToCloud.

Main projects: - Security embedment in agile development projects (risk analysis, consulting and coaching, application security and code scanning, architecture security, ...) - O365 and Airwatch Cloud due diligence (risk analysis, implementation security and compliance) - Data security (classification, protection,...) and privacy (GDPR)

Main project: - Define and implement new IAM model and processes (authorization processes, profiles management (Business and system roles), recertification;).