Beyram Achek

• Strategy & Alignment: Assisted with the design of IT security initiatives, ensuring their alignment with the strategic roadmap and validating compliance with ISO/NIST frameworks. • Managed external security vendors and service providers (e.g., outsourced SOC teams, penetration testing firms), ensuring coordination, compliance with service level agreements (SLAs), and effective delivery of mandated cybersecurity controls. • Spearheaded digitalization and automation initiatives by managing projects that leverage tools like Power BI, Alteryx, and specialized automation scripts (Python, Bash) to enhance reporting efficiency and secure configuration consistency across IT environments. • Developed Power BI dashboards to track remediation KPIs and executive reporting. • Directed and executed critical technical security projects, such as vulnerability remediation programs and system hardening efforts (CIS Benchmarks), ensuring successful delivery within defined scope, budget, and timeline (project ownership). • Contributed to continuous improvement by actively tracking cybersecurity and IT governance trends (NIST, DORA) and translating emerging technologies into actionable security policy recommendations, thereby enhancing organizational maturity and resilience. • Fostered a collaborative and security-aware culture by serving as a key liaison between technical, business, and security teams (e.g., in a DevSecOps context), promoting knowledge sharing and defining best practices. • Served as a strategic business partner, building strong relationships with business stakeholders to articulate IT risks, align security initiatives with business objectives, and significantly raise the IT/Cyber security maturity level.

• Conducted technical audits of IT environments with a focus on cybersecurity: system configuration, hardening, monitoring, operational procedures security, and business continuity (BCP/DRP) • Identified and assessed security risks on critical infrastructures, and defined technical remediation plans • Analyzed access to systems and sensitive data: review of admin/generic accounts, password policies, IAM & PAM mechanisms, and access lifecycle management • Verified application security controls within business processes (procurement, sales, inventory…): data integrity, segregation of duties, traceability • Audited change management in secure environments: validation, testing, production access monitoring, and configuration changes review • Checked operational processing controls: batch security, logging, monitoring of critical processes • Used Power BI & Alteryx for large-scale data analysis • Drafted audit reports and recommendations tailored to client contexts