Don Giot

Leading the organization’s efforts to achieve full compliance with the NIS2 regulation for entities classified as “important,” while overseeing the implementation of an ISO 27001-aligned ISMS from project initiation to successful external certification using Vanta as the selected trust platform.

Haddock protects its clients so they can focus on their business, without worrying about cyber security threats. Haddock connects cyber security experts with companies.

As an information security officer with a strong technical background, I serve as a translating agent between the IT Executive team, the internal audit department, and the internal IT teams, representing the cyber security requirements & needs of the bank. My direct responsibilities are managing the SOC/SIEM and the incident response procedures, vulnerability management, and penetration testing. I also serve as the first line of defense (in the three layers of defense model) for the cyber security controls & operations.

The Positive Thinking company entrusted me with the management of their Belgian security team. I had the pleasure of leading and coaching a team of 8 security consultants, specialized in performing penetration testing, phishing campaigns, and reverse engineering. Additionally, our team was involved in a series of ISO 27 000, and TISAX related projects to guide our clients towards compliance with these standards.

As a security officer, I was responsible for preparing the company for an ISO 27001 information security certification, and have successfully guided the company through the external audit, reaching our target of being ISO 27k certified. In light of this, I have been responsible for setting up and actively operating an incident management process, defining information security KPI's, performing a company wide information security risk analysis, and setting up an ISMS to operate our security processes in a more controlled and mature manner. As a security engineer, I have performed security testing (including penetration tests, white-box tests, security design reviews, and source code reviews) on core applications and have been in charge of implementing monitoring solutions and deploying security operations tools.

Application development and maintenance as well as functional support. The main technologies used were Cobol / DB2 / ISPF (z/OS).