Benoît Rapebach

As Lead for CyberProtection in France & BeNeLux, I oversee the strategic development and delivery of cybersecurity offerings across key domains: 🔹 Cloud & Application Security – Securing multi-cloud environments and critical applications (Azure, AWS). 🔹 Zero Trust & SASE Architecture – Designing and deploying secure infrastructure frameworks aligned with Zero Trust principles. 🔹 Identity & Access Management (IAM / IGA / PAM) – Defining governance models and access control strategies at scale. 🔹 Data & AI Security – Assessing data protection frameworks and mitigating risks linked to AI adoption (LLM, Shadow AI, compliance). 🔹 Application Security – Embedding secure development practices and DevSecOps principles into delivery pipelines. 🔹 CyberNext – Leading innovation and capability growth to anticipate emerging threats and align with future business needs. I lead multidisciplinary teams and engage with CISOs and business stakeholders to define tailored security strategies, improve cyber resilience, and support secure digital transformation programs. My role also includes go-to-market alignment, capability development, and positioning our offering portfolio in line with regulatory trends (NIS2, GDPR), evolving client expectations, and operational excellence.

As Products Security Lead for France, the Netherlands & Benelux, I was responsible for the development and expansion of our cybersecurity business across a portfolio of strategic accounts, primarily in the Industrial, Consumer Goods, Retail, Life Sciences, Mobility, Automotive, and Travel sectors. 🔹 Drove go-to-market initiatives and positioned key cybersecurity offerings in line with client needs: – Identity & Access Management (IAM / PAM) – Cloud & Infrastructure Security – GRC & compliance programs (NIS, GDPR) – SOC & SecOps models 🔹 Worked closely with client account teams and C-level stakeholders to: – Identify strategic opportunities for cybersecurity transformation – Design value propositions aligned with industry-specific challenges – Support proposal development and deal shaping 🔹 Contributed to the overall growth of the CyberSecurity portfolio, aligning delivery capabilities, innovation tracks (AI, Zero Trust), and regulatory context across multiple industries.

Whether defending against known threats in real time or detecting and responding to the unknown, we provide a full spectrum of capabilities—from security strategy development, to business transformation to managed security services. Our teams think differently about security and we’re proactive about sharing exactly what we are known for: disruptive ideas and forward-thinking research that compels our clients to take action. We lead a global, interdisciplinary security ecosystem of the brightest minds in security – disruptors. Being at the forefront of innovation allows us to help our clients build resilience in ways our competitors cannot. Our global security professionals help our clients prepare, protect, detect, respond and recover along all points of the security lifecycle. What sets us apart is our ability to advise on strategy, implement solutions specific to each organization’s needs and manage its security operations. We’ve set our sights on becoming the world’s leader in security. Hear first-hand how we’re delivering on our vision and how we’re helping our clients make their digital transformation journeys securely.

Apply deep strategy development, architecting value and operating model architecture skills to influence client agendas through insight. Partner with our clients to make bold decisions on priority C-Suite issues at the intersection of business, technology and operations. Provide deep understanding of our clients' industry landscape and business options in the context of global, economic, technology and social trends.

In charge of the IT security offering : Threat and vulnerability management - Infrastructure attack and penetration, including industrial control systems - Application assessments and secure code training - Mobile device and application testing - Social engineering - Cyber security investigations Security program management - Security strategy and road map - Organization and governance - Information security risk assessment - Security reporting and metrics - Business continuity management - Third-party risk management Identity and access management - Strategy and governance - Request and approval - Provisioning and de-provision - Enforcement - Review and certification - Role and rules management - Reconciliation - Reporting and analytics Information protection and privacy - Data protection strategy - Privacy implementation design - Data loss prevention - Privacy assessment and remediation

EY Manager Role : • Demonstrates technical excellence in specific competency domain(s) and broadens technical skills in adjoining domains (in specific sector) • Deepens knowledge of specific industry sector(s) • Manages client engagements (second engagement responsible) including QRM requirements • Shows commercial awareness by actively identifying potential business opportunities and making sales • Significantly contributes to sales and preparation for proposals • Continues to develop and maintain internal and external relationships • Effectively manages teams and support OTJ people development (e.g. Coaching, experiences, etc) • Further develops people skills by becoming a counselor

EY Senior Auditor/Consultant Role : • Actively develops and refines technical competencies by focusing in specific domain(s) • Takes the lead of a work stream or specific tasks within a client or internal engagement applying project management skills • Applies structured problem solving skills • Considers sustainability when formulating solutions for clients • Begins to supervise and coach junior professionals • Produces high quality work and effective presentations and delivery documents • Identifies and escalates potential business opportunities on existing engagements • Continues to build personal brand

- Information Security Management System (ISO27001) implementation project for a major telecommunication provider in numerous countries. - Multiple attack & penetration tests (web & thick client applications, internal, external and wireless networks) and configuration reviews for different companies, in various industries (telecom, financial services, energy, biotech), against different technologies. - Information risk management & IT governance. Business Continuity Management and Business Impact Analysis. Disaster Recovery Planning, Infrastructure resilience analysis. - Mobile financial services assessment: process and organizational review, risk mapping. - Security awareness, Physical intrusion testing. EY Staff Role : • Mature and professional approach: demonstrates resilience, handles ambiguity and displays strong self-awareness • Delivers high quality work and displays ownership and accountability for own deliverables • Demonstrates strong core consulting skills and core technical skills • Adopts a flexible approach to different situations and applies learning • Starts establishing internal and external relationships • Shows awareness of the Advisory business, its commercial drivers and operational processes • Researches and analyzes data using internal and external sources • Develops and practice effective communication skills (written and oral) • Is proficient in MS office