Baba Djombéra TANDIA

- Risk Analysis: Expertise in EBIOS RM and ISO/IEC 27005 for comprehensive risk identification and assessment. - Third-Party Risk Management: Proficient in assessing and mitigating risks associated with external vendors and service providers. - Cybersecurity Advisory: Advise IT and business projects in their early phases to evaluate cybersecurity sensitivity and identify potential risks, ensuring alignment with security best practices. - Security Requirements Delivery: Define and deliver robust security requirements during the development phases of projects to mitigate identified risks. - Action Plan Follow-up: Monitor and manage the implementation of action plans derived from risk analysis, ensuring that mitigations are executed effectively. - Subject Matter Expert (SME) for RFPs: Serve as a cybersecurity SME in the request for proposal (RFP) processes, ensuring security requirements are addressed and aligned with industry standards. Voici une version simplifiée de la dernière rubrique : - Security Awareness: Promote the importance of integrating security from the start of projects, helping teams adopt a security-first approach.

Integration of Security into Retail Banking Network Projects: - Assessment of project sensitivity. - Conducting risk analyses and creating security documentation. - Studying security risks associated with the technological direction of projects related to Cloud and Big Data. - Processing and analyzing exceptions related to the obsolescence of foundational technical platforms.

Skills: Risk Assessment

- Third Party Risk Management: Assessment of the sensitivity of outsourced services, identification and evaluation of risks, review of security clauses in contracts, and establishment of security assurance plans. - Follow-up on Audit Action Plans: Monitoring action plans and recommendations resulting from internal audits. - Remediation of Recommendations: Addressing recommendations from periodic controls. - Coordination with Provider Security Teams: Collaborating with providers' security teams to translate security requirements and remediation plans.

- Railway Transport Sector: Information Security Project Management (Integration of security into projects, risk analysis, access rights management, and IT system access control). - Public Sector: - Risk analysis using EBIOS (Public Cloud platform); - Compliance audit based on the PSSI-E (Information Security Policy of the French State); - Organizational audits and Cloud security audits; - Security advisory for the deployment of a CRM tool. - Banking Sector: Development of dashboards for investigation, monitoring, and fraud detection using SPLUNK.

Collaboration on the Implementation of an Information Security Management System (ISMS) in accordance with ISO 27001 Standards

SOC Analyst