
Gina Gulla Menez
Senior Cybersecurity & IT Audit Consultant
Salaire / Taux journalier
Paris, France
Freelance
Peut venir sur site
Expertises
Langues
À propos
Introduction
IT Risk & Cybersecurity Expert with 25+ years leading digital transformation at Fortune 500 companies. Built compliance frameworks at Sanofi, currently heading cybersecurity programs at Paris-Dauphine. Specialized in DORA, GRC, ISO 27000, SOX auditing, and cyber resilience for enterprise-level organizations.
Expérience de travail
DIgital transformation, governance, cybersecurity, IT risks audit & advisory
HDG ConsultingFreelance
nov. 2021 - Présent
5 ans
Paris, France
• Management of the advanced electronic signature project in the field of financial savings. • Support and advice to business players in the implementation of cybersecurity risk analyses. • Methodological contribution and expertise around the cyber resilience (ISO 27000, DORA, NIS2, NIST,..)
Head of Executive programme - Digital audit, advisory @ Cybersecurity
Paris-Dauphine
déc. 2020 - Présent
5 ans 11 mois
Dakar, Paris, Tunis
The Executive programme has been developed with ISACA and CRCC to meet the demands of more seasoned executives who have extensive experience in audit, advisory but also in business information technology and who want to obtain the academicfoundation in the field of Information Technology and cybersecurity.
Sanofi
nov. 2010 - juil. 2020
9 ans 9 mois
Paris suburb, France
Head of Business System Controls
janv. 2017 - juil. 2020
3 ans 7 mois
Paris suburb, France
100000 people Internal Control & processes department The Business System Controls department helps Sanofi verify that optimal system controls relating to major applications implementation are in place and operating effectively. • Establish the Business Systems Controls Department. • Set up Sarbanes Oxley (SOX) central testing covering Segregation of Duties (SoD). • Define and own User Access Management Security core model process • Manage a SAP GRC (Governance Risk Control) program covering Group SAP backoffices
Director IT Security, Internal Control and Compliance
déc. 2013 - janv. 2017
3 ans 2 mois
Paris Suburb, France
120 plants – 44000 people •Define the roadmap, methodologies, standards in terms of pharmaceutical quality, security, internal control and project portfolio in order to guarantee the security and compliance of information systems (GxP, Sarbanes Oxley,) • Continually monitors and updates assessment of security and control environment; tracks significant control issues, developments, and trends so as to ensure ongoing compliance with COSO, Sarbanes-Oxley, etc. of an IS security and internal control awareness program • Management of internal and external international specialist teams
Director Compliance, Security and Risk Management
nov. 2010 - déc. 2013
3 ans 2 mois
92160 Antony, France
Director IS Compliance and risk management 120 plants – 44000 people Acts as staff to the IS/IT Industrial Affairs management committee by monitoring and reporting results . Directly supervises 30 Intern Employees based in Europe, Asia, North America ,.. Compliance & Risk Management activities are organized around 4 integrated departments : • IS Quality and Compliance : ensuring that company / regulatory requirements are embedded and covered in the IS projects, solutions and processes • Internal Control : SOX testing, • Risk management & Security: identification, assessment of any threats on IT system. Definition of PGSSI (General Policy for IS Security), of PSSI (ISO 27001, COBIT) • Methods & tools: Formalize, capture and publish “state of the art” in Industrial Affairs. Implement tools to improve efficiency of IA IS activities: automated testing,..
Sanofi
août 2002 - oct. 2010
8 ans 3 mois
94250 Gentilly, France
Senior Director IS process and project Audit
janv. 2005 - oct. 2010
5 ans 10 mois
94250 Gentilly, France
Internal Audit Department 100000 people, 100 countries * Constitute and implement the IS audit methodology * Proactively work with management to identify risks and control objectives in the application of technologies in support of strategic objectives * Define and carry-on audit assignments based on the IT-related risk evaluation. * Closely manage the internal and external audit teams (Senior managers from KPMG, Deloitte, Mazars) • Study and design of risk mapping and SOX compliance approach
Senior Quality Director
août 2002 - déc. 2004
2 ans 5 mois
Paris et périphérie
Define and implement the IS Quality policy Support and promote process improvement Manage a direct report team and the Sanofi IS Quality network
Quality Manager
Orange
sept. 1999 - juil. 2002
2 ans 11 mois
92130 Issy-les-Moulineaux, France
Identify and encourage all activities initiated by DTL ’s organizational units in order to improve the management and control of Quality. Quality & Processes is the designated active partner responsible for facilitating and supporting a common culture in which every person in DTL applies a flexible and adaptable approach in the presence of change, and • is focused on customers’ needs, • emphasizes measurement and feedback • is committed to continuous improvement and learning • applies a process-oriented approach to business • uses a project management discipline in all projects to better achieve the objectives. Launch and manage projects to continuously improve Quality to meet market, shareholders and employees needs (EFQM). Support and promote quality improvement in SW development processes and products : • Launch and manage ISO/SPICE assessments, • Propose and implement software process improvement plan with specific goals and measurable benefits, • Contribute to the definition of international standards (ISO/SPICE, ISO/12207,) as expert and French correspondent of IEEE. • Publish on Value Analysis, software metrics, software process improvement. These publications include both presentations at scientific conferences and seminars as well.
Thomson CSF - Security for Information System
Atos Origin
sept. 1996 - déc. 1999
3 ans 4 mois
Paris et périphérie
Implementation of the Common Criteria (ISO 15408) IT system security evaluation standards Develop expertise in all areas of Software Process Improvement and notably Security for Information Systems. Built a baseline of methodological documents which gathered software development practices and descriptions of processes. The process baseline is ISO 9001, ISO 13335 , CMM from SEI (Software Engineering Institute)compliant. It makes it possible to store and diffuse the standardized processes in the company. Contributed to create a SEPG (Software Engineering Process Group) Organized CMM© assessments and audits (diagnosis) in order to know exactly which weaknesses must be addressed. Developed improvement plan and helped in planning and implementing software improvement actions.
Product manager Telemaq
T-MIS Solution
janv. 1995 - sept. 1996
1 an 9 mois
Paris et périphérie
Telemaq is a computer-based solution for software quality management. Designed and led training sessions, product promotion, selling, consultancy. Contributed to the definition of international standards (ISO 9126).
Formation
Conservatoire National des Arts et Métiers
Ingenieur DPE, Information system
1995 - 1998
2 ans 10 mois
Université Paul Sabatier Toulouse III
Master's degree, Information System
1990 - 1995
4 ans 10 mois