CHristophe PInoncély

CISO / GRC deputy : search position LT 09/2025 by portage company, full time, hybrid Possibles places : Paris small crown, Swiss, Italy ==> TGV cities in EU

Owner & general manager on a saas Grc solution, sSDLC industrialization & "platformization".

Gouvernance sécurité informatique et risk management

- Creation, improvement and industrialization of specifics standard regarding typologies of projects: In House, Integrated product, Saas, or any other specific implementation, from security requirements for project manager to contractual clauses applicable. - Help & advisory on Architecture documentation and representation for It Projects, same for addressing Role base access model of applicative right management - Study, Design, and writing request for proposal, targeting major actors of encryption partners for worldwide GDPR and other regulations compliance ( database encryption, anonymization & tokenization, secrets and certificates management) - Writing and deploy architecture guidelines and coding guidelines, testing strategies & policies. - Self-improvement of my english level by practice and immersion around documentation, contracts including formal Uk and US terminologies, internal standards, communication with IT partners and project managers - Collaboration with all IT services and business people and problematic of delivery, R & D, and prospective of reinsurance with never forget the compliancy of regulations to take in account - ...

all scope / IT cyber security

compliancer & coder

Mission Auto-assessment / iso27002 & Sox : v2013 to stay compliant or in progress for Orange Group

auto-assessment, plan for compliancy on iso27002 : V2005 & Sox for Orange BS

deputy CISO inside a french mutuelle, rewriting of security policies, writing from scrtach the IT chart, begining of compliancy & risk management regarding CNIL requirements, vitals flows security, KPIs, iterative maturity. Buildi organisational BCP for the nominal datacenter. Trained for CIL role and HR stakes treatments regarding risk, duration, finality & others... (CIL means : "PIIC" : personal informations individual correspondant I mean; That exists in France since 2010 before GDPR take in place in 2017)