Imane LAAOUANE

Designed and implemented an internal data protection strategy, reducing unmonitored sensitive data access. Deployed Symantec DLP to prevent data exfiltration across web and email, configuring custom rules and managing high-priority incidents. Strengthened data governance using Varonis for unstructured data (NAS, SharePoint), conducting access reviews and fine-tuning alert thresholds to reduce noise and false positives. Led the Guardium Discovery initiative to classify sensitive structured data across Oracle, PostgreSQL, and MongoDB environments, aligning data flows with GDPR and ISO 27001 standards. Integrated security incident workflows with ServiceNow, improving incident resolution time.

Led the deployment of Netskope to improve web and SaaS security visibility, enabling early detection of threats across user activity. Investigated and resolved security incidents, optimizing detection rules and reducing false positives. Designed and enforced exception handling protocols, balancing operational flexibility and threat detection accuracy. Operationalized Varonis for Active Directory, Exchange, and file systems, streamlining access governance for critical assets. Built and maintained recurring access review reports, increasing audit readiness and reducing access risk. Performed continuous alert tuning and rule refinement, aligning security controls with evolving threat scenarios.

Designed and implemented a Data Loss Prevention (DLP) strategy using Digital Guardian, strengthening internal data protection and reducing exposure of sensitive data. Led incident triage and response through DGArc (Digital Guardian Analytics & Reporting Cloud), ensuring rapid resolution of leakage events and improving MTTR. Conducted recurring security controls and health checks, maintaining compliance with GDPR and internal security policies. Served as Project Owner for Varonis in IAM: – Automated access recertification workflows for applications and directories, reducing manual workload. – Directed migration of Varonis servers to internal cloud (PIASS), improving system performance and scalability. – Developed a Power BI dashboard for real-time access governance, enhancing stakeholder visibility and reducing review cycle time.

RBAC Implementation and Access Management ● Implemented Role-Based Access Control - RBAC model, enhancing security compliance and access efficiency ● Led access recertification, aligning with compliance to reduce unauthorized access. ● Analyzed user access risks, identifying and mitigating security threats. ● Managed security exceptions and oversaw privileged accounts, safeguarding sensitive data.

● Conducted GDPR-aligned research on personal data usage in IoT contexts. ● Created PoCs on user consent and secure data flows, contributing to innovation in privacy management. ● Research publication: Authenticated and Privacy-Preserving Consent Management in the Internet of Things in Procedia Computer Science journal and in GIIS conference (2018).