Jean VINCIGUERRA

▪︎ Specialized Consultant in Governance, Risk and Compliance (GRC) for the IT, Cyber and Technology sectors. ▪︎ Providing comprehensive senior support for informational, digital, and technological assets, covering digital and information governance, compliance, risk management, and information security.

Information Security Club for the French South Region, whose mission is to bring together the various players in the cybersecurity ecosystem, both private and public, in order to promote a culture of security within its geographical area of influence, foster relationships with higher education and research institutions in the field of information systems security, and encourage exchanges between its members through working groups, think tanks, and discussions in the field of cybersecurity.

▪︎ Bridge the gap between IT, CyberTech and Compliance, fostering a strong security and risk governance culture and providing actionable insights for business objective risk mitigation. ▪︎ Support governance, risk and compliance activities for the company, ensuring operational resilience and alignment with industry best practices, regulations (including GDPR) and business needs. ▪︎ Contribute to maintaining the company's 27001 certification and providing robust risk support to stakeholders. ▪︎ Provide high-level support to stakeholders for handling security incidents ▪︎ Design and deploy a standardized combined system (in Jira) for 27001 tracking, risk analysis (including GDPR and AI risks), and asset management, streamlining GRC and ORC workflows in line with business requirements.

▪︎ Coordinated the GRC/cyber practice and mission activities within the Unitel Cloud Services consulting division. ▪︎ Developed the cyber insurance process (including cyber insurance policy dedicated to this segment with a partner), and crafting of consulting services for SMEs. ▪︎ Defined Corsica's territorial cyber strategy and led the development of its territorial Cyber Campus, expanding the Group's regional influence.

▪︎ Led the definition and implementation of the Governance and Risk Management (GRC) strategy across the entire ecosystem. ▪︎ Managed major sector-wide cyber claims and provided critical support for Cyber Insurance cases. ▪︎ Ensured the alignment of digital security practices with key regulations and methodologies (e.g., PSSIE, EBIOS RM, ISO, ANSSI). ▪︎ Coordinated sensitive issues with the Ministry of Justice’s InfoSec bodies and successfully implemented a certification authority to secure the digital ecosystem.

▪︎ Served as CISO for the CNCJ subsidiary, responsible for security across business and regulatory software development, and digital infrastructure management (including the organization’s private Data Center).

Insurance Claims Adjuster and Consultant : ▪︎ As a claims adjuster, I have handled atypical and complex insurance and legal claims (up to €139 million), specializing in technology, cybersecurity, and firearms cases. ▪︎ As a consultant, I provide support in anticipating and managing risks (digital, technological, and cyber), helping clients assess their risk maturity and exposure, and implement or upgrade their cybersecurity practices and management systems.

▪︎ Led the organizational management of site teams and cross-functional projects, encompassing strategic planning, security protocols, and budget oversight. ▪︎ Cultivated and managed customer relations with regional URSSAF agencies, ensuring strong partnerships. ▪︎ Contributed to national strategic direction through active participation in ACOSS committees. Provided key leadership and strategic input as a member of the center's Executive Committee (ExCom).

▪︎ Outsourcing: Management of the outsourcing of Eurocopter's central data center and confidential defense IT resources. ▪︎ Services: Organization and monitoring of services (committees, service commitments, etc.) ▪︎ Management: Contract and customer relationship management and management support.

▪︎ Successfully managed the accreditation process for Health Data Hosting (HDS V1), ensuring compliance and operational readiness. ▪︎ Acted as an internal consultant, optimizing operations, implementing best practices, and enhancing security for various outsourcing projects. ▪︎ Delivered expert external consulting services for Health and Hospital Information Systems (IS), advising on strategic and operational improvements.