Imed MHAMDI

– Work with technical architects to design secure cloud and application architectures. – Work with IT Sec colleagues to assess applications and tools security. – Provide security policies and technical guidelines for different topics (Encryption, DB, Kubernetes, ZIA). – Provide security coaching and advice to senior developers, Tech Leads and Head of Tech

– Application and infrastructure risk analysis – Definition of security control requirements (Encryption, SSO, network segmentation, ...) – Architecture design of a Microsoft data encryption solution based on BYOK and HYOK – Produce typical security architecture patterns and technical security rules adapted to the group context. – Security review of the delivered solutions and documentations (High/ low level design)

– Provide advice to operating units at all levels on information security issues and recommended practices. – Audit of IAM processes and define a remediation plan. – Running risk assessment tests and defining countermeasures

– Define a new information security policy (IAM and Vulnerability management). – Provide complex technical advice, recommendations, and consultancy to meet audit recommendations.

– Conduct IT risk analysis based on pentest reports. – Design of a new Risk analysis framework based on ISO 27005 standard. – Design of a new compliance framework based on ISO27001 standard. – Work on an LPM based security policy

– Conduct IT risk analysis and definition of remediation plan. – High/low level design review and approval of network flow demands. – Meeting with clients to discuss security measures, provide information, and explained the designed system.

– Assist the technical architects to design a new datacenter network. – Benchmark of security solutions to meet the project needs.