Gina Gulla Menez

Senior Cybersecurity & IT Audit Consultant

Salaire / Taux journalier

Paris, France

Freelance

Peut venir sur site

Expertises

Conseil ITConseil en cybersécuritéRGPDProject OwnerGestion de projet - PMO

Langues

Français (Maternelle)Anglais (Courant)Italien (Courant)Espagnol

À propos

Introduction

IT Risk & Cybersecurity Expert with 25+ years leading digital transformation at Fortune 500 companies. Built compliance frameworks at Sanofi, currently heading cybersecurity programs at Paris-Dauphine. Specialized in DORA, GRC, ISO 27000, SOX auditing, and cyber resilience for enterprise-level organizations.

Liens

Expérience de travail

DIgital transformation, governance, cybersecurity, IT risks audit & advisory

HDG ConsultingFreelance

nov. 2021 - Présent

5 ans

Paris, France

• Management of the advanced electronic signature project in the field of financial savings. • Support and advice to business players in the implementation of cybersecurity risk analyses. • Methodological contribution and expertise around the cyber resilience (ISO 27000, DORA, NIS2, NIST,..)

Head of Executive programme - Digital audit, advisory @ Cybersecurity

Paris-Dauphine

déc. 2020 - Présent

5 ans 11 mois

Dakar, Paris, Tunis

The Executive programme has been developed with ISACA and CRCC to meet the demands of more seasoned executives who have extensive experience in audit, advisory but also in business information technology and who want to obtain the academic foundation in the field of Information Technology and cybersecurity.

Sanofi

nov. 2010 - juil. 2020

9 ans 9 mois

Paris suburb, France

Head of Business System Controls

janv. 2017 - juil. 2020

3 ans 7 mois

Paris suburb, France

100000 people Internal Control & processes department The Business System Controls department helps Sanofi verify that optimal system controls relating to major applications implementation are in place and operating effectively. • Establish the Business Systems Controls Department. • Set up Sarbanes Oxley (SOX) central testing covering Segregation of Duties (SoD). • Define and own User Access Management Security core model process • Manage a SAP GRC (Governance Risk Control) program covering Group SAP backoffices

Director IT Security, Internal Control and Compliance

déc. 2013 - janv. 2017

3 ans 2 mois

Paris Suburb, France

120 plants – 44000 people •Define the roadmap, methodologies, standards in terms of pharmaceutical quality, security, internal control and project portfolio in order to guarantee the security and compliance of information systems (GxP, Sarbanes Oxley,) • Continually monitors and updates assessment of security and control environment; tracks significant control issues, developments, and trends so as to ensure ongoing compliance with COSO, Sarbanes-Oxley, etc. of an IS security and internal control awareness program • Management of internal and external international specialist teams

Director Compliance, Security and Risk Management

nov. 2010 - déc. 2013

3 ans 2 mois

92160 Antony, France

Director IS Compliance and risk management 120 plants – 44000 people Acts as staff to the IS/IT Industrial Affairs management committee by monitoring and reporting results . Directly supervises 30 Intern Employees based in Europe, Asia, North America ,.. Compliance & Risk Management activities are organized around 4 integrated departments : • IS Quality and Compliance : ensuring that company / regulatory requirements are embedded and covered in the IS projects, solutions and processes • Internal Control : SOX testing, • Risk management & Security: identification, assessment of any threats on IT system. Definition of PGSSI (General Policy for IS Security), of PSSI (ISO 27001, COBIT) • Methods & tools: Formalize, capture and publish “state of the art” in Industrial Affairs. Implement tools to improve efficiency of IA IS activities: automated testing,..

Sanofi

août 2002 - oct. 2010

8 ans 3 mois

94250 Gentilly, France

Senior Director IS process and project Audit

janv. 2005 - oct. 2010

5 ans 10 mois

94250 Gentilly, France

Internal Audit Department 100000 people, 100 countries * Constitute and implement the IS audit methodology * Proactively work with management to identify risks and control objectives in the application of technologies in support of strategic objectives * Define and carry-on audit assignments based on the IT-related risk evaluation. * Closely manage the internal and external audit teams (Senior managers from KPMG, Deloitte, Mazars) • Study and design of risk mapping and SOX compliance approach

Senior Quality Director

août 2002 - déc. 2004

2 ans 5 mois

Paris et périphérie

Define and implement the IS Quality policy Support and promote process improvement Manage a direct report team and the Sanofi IS Quality network

Quality Manager

Orange

sept. 1999 - juil. 2002

2 ans 11 mois

92130 Issy-les-Moulineaux, France

Identify and encourage all activities initiated by DTL ’s organizational units in order to improve the management and control of Quality. Quality & Processes is the designated active partner responsible for facilitating and supporting a common culture in which every person in DTL applies a flexible and adaptable approach in the presence of change, and • is focused on customers’ needs, • emphasizes measurement and feedback • is committed to continuous improvement and learning • applies a process-oriented approach to business • uses a project management discipline in all projects to better achieve the objectives. Launch and manage projects to continuously improve Quality to meet market, shareholders and employees needs (EFQM). Support and promote quality improvement in SW development processes and products : • Launch and manage ISO/SPICE assessments, • Propose and implement software process improvement plan with specific goals and measurable benefits, • Contribute to the definition of international standards (ISO/SPICE, ISO/12207,) as expert and French correspondent of IEEE. • Publish on Value Analysis, software metrics, software process improvement. These publications include both presentations at scientific conferences and seminars as well.

Thomson CSF - Security for Information System

Atos Origin

sept. 1996 - déc. 1999

3 ans 4 mois

Paris et périphérie

Implementation of the Common Criteria (ISO 15408) IT system security evaluation standards Develop expertise in all areas of Software Process Improvement and notably Security for Information Systems. Built a baseline of methodological documents which gathered software development practices and descriptions of processes. The process baseline is ISO 9001, ISO 13335 , CMM from SEI (Software Engineering Institute)compliant. It makes it possible to store and diffuse the standardized processes in the company. Contributed to create a SEPG (Software Engineering Process Group) Organized CMM© assessments and audits (diagnosis) in order to know exactly which weaknesses must be addressed. Developed improvement plan and helped in planning and implementing software improvement actions.

Product manager Telemaq

T-MIS Solution

janv. 1995 - sept. 1996

1 an 9 mois

Paris et périphérie

Telemaq is a computer-based solution for software quality management. Designed and led training sessions, product promotion, selling, consultancy. Contributed to the definition of international standards (ISO 9126).


Formation

Conservatoire National des Arts et Métiers

Ingenieur DPE, Information system

1995 - 1998

2 ans 10 mois

Université Paul Sabatier Toulouse III

Master's degree, Information System

1990 - 1995

4 ans 10 mois

Le meilleur endroit pour trouver votre prochaine opportunité

© 2026. Tous droits réservés.