Francois Robidel

Supporting the Head of Cybersecurity Compliance in shaping and steering the Groups Cyber Compliance function: defining the operating model, building the control framework, and maturing reporting to governance bodies. - Strategy and operating model: defined the Cyber Compliance strategy and designed the functions operating model; drafted the Statement of Work and organised the associated workstreams. - Control framework: designed and matured the cybersecurity control framework; defined, built and tracked its evolution roadmap, aligned with Group policies and standards. - Continuous monitoring: matured the capability used to measure and continuously track compliance with Group cybersecurity policies and standards. - Dashboards and reporting: reworked the reporting framework, defined the KPIs and KRIs, and improved how compliance data is consolidated and presented. - Executive governance: prepared materials for and contributed to Cybersecurity Compliance governance bodies.

Structuring and deploying the Group’s second line of defense (LoD2) cybersecurity governance framework. - Designing and implementing cybersecurity dashboards and KPI/KRI metrics to enable risk monitoring and executive-level reporting. - Defining and rolling out a Group-wide cybersecurity awareness and communication strategy to strengthen security culture. - Leading initiatives to ensure regulatory compliance with major frameworks (NIS2, CRA, LPM). - Conducting EBIOS RM risk assessments and supporting business and IT stakeholders in risk identification and mitigation. - Monitoring risk treatment plans and coordinating remediation actions across technical, business and governance teams.

CISO, GRC and cybersecurity advisor

Cyber Security Gouvernance Manager and Cyber program director chez Avril

In charge of Information Security related topics for all Nestlé brands in Switzerland including Nespresso, Nestlé Waters, Nestrade and Nestlé Switzerland market. Also in charge of the Data protection program deployment in Switzerland.