JEAN CHRISTOPHE DUPUY

• Directed a global security organization with all Business Unit CISOs reporting to me, ensuring unified governance and consistent security policy implementation. • Led the implementation of Amadeus’s AI Security Framework, achieving compliance with the EU AI Act and embedding robust governance into AI development and deployment. • Launched and managed the DORA Digital Operational Resilience Act compliance program for the payment division, enhancing operational resilience and ICT risk management in line with EU financial regulations. • Supported the Group CISO in shaping global security strategy, risk management, and regulatory initiatives. • Advised and mentored regional CISOs, driving best practices in security maturity, post-merger integration, and regulatory alignment.

• Built and led the cybersecurity organization for a business unit formed from four acquired companies, scaling the team from 8 to 50 professionals. • Established security governance around four core pillars: Global Risk Compliance (ISO 27001, SOC 12, PCI DSS, GDPR, CCPA, TPRM with OneTrust/Archer/Fusion), Project Management Office (PMO) with $8M budget, Secure Development Lifecycle (SDL) based on OWASP, and a Security Operations Center (SOC) leveraging Splunk SIEM, IDS/IPS, endpoint security, Akamai/Imperva WAF. • Achieved 98% IT asset visibility and 100% maturity visibility on customer-facing applications, enabling data-driven decisions on technical debt, investment, and application lifecycle. • Implemented a new Security Incident Response Plan (SIRP) with 100% incident visibility, consistent logging, and cross-functional training, leading annual tabletop exercises to strengthen crisis response. • Reduced incident severity from critical in 2019-2020 to only low-impact events by 2025. • Expanded ISO 27001 certification from 1 to 10 product lines and maintained PCI DSS certification on 20 products through major standard transitions. • Developed a cloud security dashboard for Azure, supported multi-cloud readiness (Azure, Google Cloud, AWS), and integrated vulnerability management (Nessus, Qualys, Rapid7) with GRC for quarterly ISO 27001 risk posture updates.

• First Regional Security Officer for APAC, establishing and leading the region’s cybersecurity program with minimal initial guidance. • Developed and implemented a comprehensive cyber program including discovery, on-site security audits, and direct customer engagement. • Delivered face-to-face cybersecurity awareness training across the region. • Built standardized processes for risk assessment and incident management tailored to regional needs. • After two years, selected to lead and deploy the program across the Americas and Europe, ensuring global consistency and enabling unified visibility of Amadeus’s worldwide security posture. • Laid the foundation for ongoing security monitoring, reporting, and stakeholder communication across all regions.

• Designed new network solutions using the latest technologies, reviewed and approved by the network engineering department. • Defined procurement strategy for network services, ran RFP processes, and selected and contracted vendors. • Led adoption of new solutions at better cost, with improved SLAs and standardized contracts favorable to the company. • Delivered all new services on time and within budget, managing an overall running cost budget of 80M Euros.

• Responsible for all the Group’s communication solutions, including phone systems, cell phones, smartphones, conferencing solutions, and help desk platforms. • Managed a team of 10 people overseeing operations and technology adoption. • Adopted new technologies and successfully migrated telephone and help desk services to IP-based solutions, including iPhones and iPads. • Negotiated with all network providers to control costs and optimize service agreements. • Managed an overall annual budget of 8M Euros

• Responsible for rebuilding all computer rooms for the Sophia Antipolis campus. • Oversaw the design and implementation of critical infrastructure, including: • Electrical distribution grid • HVAC systems • Generators and UPS units • Copper and fiber cabling installations