Bassel Jabak

Senior Information Security Technical Officer – India, Middle East & Africa, oversee regional operational security implementation activities for a defined scope and ensure the correct implementation of Group policies across India, Middle East, and Africa transversely across CMA CGM group entities and subsidiaries. The main tasks will include: -Follow-up and assist on the implementation of cybersecurity policies, roadmaps, and projects on its scope. -Oversee the monitoring of security events, exceptions, and alerts of his scope to detect and respond to potential threats, supervision of the MSSP / IT providers -Work closely with cyber service lines to align security practices with the organization's overall security strategy. -Relay all cybersecurity information updates towards IT activities. -Work with IT teams to incorporate security standards and best practices into the design and implementation of systems and networks within the scope. -Facilitate the creation and prioritization of appropriate remediation plans following vulnerability management initiatives. -Oversee the security assessments and penetration tests on systems and applications to follow up on remediation measures. -Provide technical security updates and reports to Regional CISO on the security posture of the scope and ongoing security initiatives. -Identifying and reporting risks related to the information system in connection with incidents. -Monitoring risk reduction action plans -Ensure appropriate measurements are in place for efficiency of the service provided towards other lines of defense. -Oversee the implementation of security technologies and tools within the region. -Maintain KPIs by cyber-Process for each brand

-Provide central coordination between entities based on Europe and America, operations security teams and product managers on security products offered within Cyber Defense. -Support Product Manager to maintain security services to entities based on and resources capacity -Plan required to meet current and future performance requirements including identification of improvement plan and roadmap trends. -Produce and maintain a security service Catalogue and its contents in conjunction with security and Group IT framework -Improve the process for handling requests and incidents with the MSSP -In-depth knowledge of SOC operating processes to be the first point of contact for security experts from different entity in the world

Centralization of logs using the following technologies: -ELK (Elasticsearch, Logstash, Kibana) -Beats and x-pack -Kafka -Securing end-to-end architecture to meet PCI DSS and ISO 27001 business needs

-Identification of the most important risk scenarios through documentary studies -Identification of the logs related to the scenarios through documentary studies and real tests -Definition of the alert rules in the ELK (Elasticsearch, Logstash, Kibana) tool detecting the identified behaviors -Delivery of a summary presenting the scenarios, the corresponding logs and the defined ELK rules

Hardening of Saint Joseph University's web server security so that present a check list for the Technology and Information Service to ensure the hardening they should work on the following parts: -Apache WEB Services / PHP -Open SSL - The Linux Operating System (Redhat)

Analysis of the needs of a customer who wants to deploy a network between these different sites Design and configure a network of 3 sites for a client with the implementation of Windows servers, Private Automatic Branch exchange (PABX), PC (S) and other equipment Troubleshooting that helps to determine the source of a technical problem and solve it