Grégoire Sandré
Chief Information Security Officer
Salaire / Taux journalier
92100 Boulogne-Billancourt, France
Freelance, ouvert au CDI
Peut venir sur site
Expertises
Langues
À propos
Expérience de travail
Group Chief Information Security Officer
Trescal Group
mars 2021 - Présent
5 ans 8 mois
94150 Rungis, France
Group Chief Information Security Officer - Deployment of e-learning security training with phishing tests, in 6 months * Over 5000 employees trained in 20 languages - Implementation of continuity plans in the Group's main countries (80% of Group sales) * Continuity plans defined in less than a year * Implementation of the Group management system - Deployment of EDR * More than 80% of scope covered in less than 6 months
Chief Information Security Officer
Umanis
déc. 2017 - déc. 2020
3 ans 1 mois
69340 Francheville, France
- Maintain and renew ISO 27001 certification - Extend ISO 27001 to all Service Centers and Branch Offices in France and Morocco - Deploy GDPR and security awareness to all employees and sub-contractors; - Deploy security training to all consultants
Digital Security - Econocom
août 2010 - déc. 2017
7 ans 5 mois
92350 Le Plessis-Robinson, France
Senior Security Consultant
juin 2017 - déc. 2017
7 mois
92350 Le Plessis-Robinson, France
- Help Econocom to maintain its ISO 27001 Certification * Produce Risk Assesments for the four entities added to the perimeter => Strong point of the follow-up ISO 27001 Audit * Coaching of a production Team => Strong point of the follow-up ISO 27001 Audit
Senior Security Consultant at SNCF
juin 2014 - juil. 2017
3 ans 2 mois
69340 Francheville, France
- Support SNCF IS Security Managers; * In charge of the Information Security Support mailbox; - Risk assessments including update of Office 365 risk assesment - Recommendations for architecture and administration improvements; - Security Assurance Plan reviews; - Management of exemptions; - Application architecture review;
Total S.A. Holding Chief IS Security Officer Deputy
août 2010 - mai 2014
3 ans 10 mois
Vétheuil, France
- Support to Security Governance: coordination of audit action plans, follow-up of integration of security in projects and running applications, dashboard production; - Coaching of IS Security Officer deputies; - Coordination of audits or consulting of third parties, review of intermediate and final deliverables; - Review of security processes and creation of indicators; - Maintenance and production of bilingual security document templates. - Automated follow-up of Active Directory accounts and indicators lead to nearly nullifying creation of accounts out of defined processes. - Creation of policies allowed to reduce the need to grant local administrative accounts and when granted to limit attack surface by disallowing local administrative rights while accessing internet. - With very limited support, 20% of projects have now a risk assessment and a security compliance report when nearly none have this information two years before.
AREVA T&D
oct. 2005 - déc. 2010
5 ans 3 mois
Vétheuil, France
Information Systems Security Manager
déc. 2007 - déc. 2010
3 ans 1 mois
Vétheuil, France
Chief Information System Security Officer - Lead IS to ISO 27001 certification; * Creation of AREVA T&D risk treatment plan; - Lead worldwide security teams and security projects; * Launch worldwide ISO 27001 deployment; - Member of AREVA Group IS Security board; * Define security incident levels; * Review of Group IS Security Policy.
Office Solutions Security Team Leader
oct. 2005 - déc. 2007
2 ans 3 mois
Vétheuil, France
- Worldwide deployment of WSUS and common Anti-virus solution - Information Security Policy project manager - Coordination of Security inside T&D and with AREVA group; * Define worldwide IS security user charter; * Implementation of security process in AREVA T&D
Consultant - Active Directory Architect
GROUPE ONEPOINT / Vision IT Group
nov. 2004 - juil. 2005
9 mois
- Design migration of 2000 Windows servers and improve Active Directory implementation. * Integrate needs of operations and security since the beginning of the project (DevSecOps)
IT Systems and Security Consultant
Monday ConsultantsFreelance
janv. 2004 - déc. 2004
1 an
- IT support to small businesses
System and security coordinator
Schlumberger
avr. 1992 - janv. 2003
10 ans 10 mois
69340 Francheville, France
- Customer quality of service strategy advisory and guidance; - Coordination of technical teams; - Site IT & IS Security Manager; - Windows administration & management of 1000 clients & over 20 servers; - Project manager of site part of Schlumberger group for Windows systems standardization; - Member of Schlumberger wide « Incident Response Team »; - Project manager for site deployment of Corporate Windows clients backup.
Software Developer & Project Manager
Sogidec - Ylys Informatique
mars 1988 - mars 1992
4 ans 1 mois
69340 Francheville, France
Project Manager – Technical Advisor - RFP answering - Software and infrastructure design - Consulting - Training System Software Engineer - System & network software development * Development of administration tool still in use in 2004 - System administration, - System operation, - System normalization
Project Manager - National Service (VSNE)
Sinorg
déc. 1986 - mars 1988
1 an 4 mois
(People) Republic of Congo
Reorganization of operations Administration Software developments
Software Engineer
KOTEL
sept. 1986 - déc. 1986
4 mois
69340 Francheville, France
Improvement of the security and resilience of a ticket management system on PCs (still in use in 2001) for American Express
Formation
ESME, école d'ingénieurs généraliste
Engineer
1981 - 1986
4 ans 11 mois
Licences et certifications
EBIOS RM
Délivré le : juin 2025
Certified Information Security Manager® (CISM)
Délivré le : avr. 2009
Certified Information Systems Security Professional (CISSP)
Délivré le : nov. 2006