
Gauss NGOUMNAÏ
Senior Cyber Security Risk Manager
Salaire / Taux journalier
Paris, France
Freelance
Peut venir sur site
Langues
À propos
Introduction
Cybersecurity strategist with 8+ years protecting major enterprises including Philips, ODDO BHF, and Société Générale. Specialized in risk management frameworks (ISO27005, EBIOS), FDA medical device security, and CISO roadmap coordination. Expert in vulnerability management, penetration testing, and regulatory compliance across finance and healthcare sectors.
Expérience de travail
CISO Roadmap coordinator
ODDO BHF
mars 2018 - déc. 2020
2 ans 10 mois
Paris, France
• Animation of security and IT committees o Manage dashboards o Present the objectives and results • Risk management o Organize workshops with IT and security operational staff o Create a risk treatment process and have it approved o Continuously improve the risk treatment process o Manage security vulnerabilities o Analyze and classify risks (according to an EBIOS approach) o Define the risk treatment plan and have it approved • Coordination of the risk treatment plan o Define an action plan for each risk and have it approved o Coordinate stakeholders (IT and business teams) during the implementation of action plans o Have the treatment of each risk approved
Operational Risk Management
Société Générale
sept. 2017 - mars 2018
7 mois
Paris Area, France
• Manage operational risks related to Outsourcing Essential Services o Assist the operational staff in drafting contracts o Integrate IT security in the suppliers management o Perform IT risks assessments on security, compliance, and Business Continuity Plan o Follow up risks treatment measures • Manage defense in line based on Bale 2 recommendations o Perform managerial controls o Perform permanent supervision
Information Security Management and Control
AXATECH
juin 2016 - août 2017
1 an 3 mois
Paris, France
Steering committee facilitator Coordinate and control activities of teams located in different countries Manage the security dashboards of the various subsidiaries company Automate the consolidation, the analysis and the presentation of dashboard data using Power BI Define indicators (KPI and KRI) of the security Dashboard Formalize numerous process Follow-up remediation actions to be compliant with the security policy Responsible of the security patch process (Vulnerability Management / Patch Management) Analyse Qualys Vulnerability Scan Reports Coordinate penetration test
Security Consultant
Devoteam
mars 2016 - août 2017
1 an 6 mois
Région de Paris, France
Security Engineer
Alcatel-Lucent
juin 2015 - déc. 2015
7 mois
Région de Paris, France
As part of a project about the security of internet of things: - Analysis of the opportunity of a security service for connected objects - Design of a hacking tool - Perform intrusion tests on connected objects and related protocols - Organisation of two security HACKATON, open hacking challenges Tools: C, JavaScript, Python, Scapy, Kali Linux, Pentoo
Security Officer
Securitas AG, Swiss Guarding Company
août 2013 - janv. 2015
1 an 6 mois
Région de Lausanne, Suisse
Ensure the safety of people. Working with the police to defuse or end riots.
Web Development
Lotaris SA
févr. 2013 - août 2013
7 mois
Yverdon-les-Bains, Suisse
As part of the performance monitoring of a SaaS platform, my role was: - Definition of a method for analysing the performance of the platform federating developers’ work (Hundreds of users spread over 3 continents and 4 company sites) - Setting – up of a test platform (Flow simulation, collection and publication of performance measures) - Design and develop an analysis tool of performance which monitor flows between the web platform and the database Tools: cURL, JPA, JPQL, JSON, JSP, REST Client, SQL, Netbeans; Glassfish
Sales
Esso
avr. 2009 - mai 2013
4 ans 2 mois
Région de Lausanne, Suisse
Sell the products of the shop Train employees in sales techniques
Assistant system engineer
Institut et Haute Ecole de la Santé La Source
janv. 2013 - janv. 2013
1 mois
Région de Lausanne, Suisse
Maintain workstations Install operating systems Discard obsolete workstations
Formation
Télécom Paris
Master's Degree
2014 - 2015
2 ans
HEC Lausanne - The Faculty of Business and Economics of the University of Lausanne
2013 - 2014
2 ans
HEIG-VD
Engineer's Degree
2008 - 2013
6 ans
Ecole Normale Supérieure de Yaoundé
2006 - 2008
3 ans