Jeremy Longuet

For an Information Security Risk Management Software: > Support alignment of software requirements to new regulation (DORA) > Key enhancement of software to operational problematics > Roadmap review, and participation to risk management metrics evolution related to regulation > Provide support in customer projects AI tooling development for information security, third party and contract management

> Align security strategy, policies, procedure to local regulation (ACPR, GDPR) > Improve security dashboards and reviews, including but not limited to: networks, data privacy, vulnerability and patch management, business continuity > Provide support and coordinate with international teams, inlcuding internal projects, due diligences, risks analysis, technical reviews. > Enhance business continuity and disaster recovery

Improved Information Security Policies and framework following ISO 27001 and 22301: > Improved, maintained, and reviewed Information Security framework: policies review, enhancement, creation > Created, tested, reviewed, and improved Incident Management, Business Continuity and Crisis Management > Created, maintained, and reviewed Internal Security awareness including live events and e-leanings (Information Security, business continuity, GDPR) Enhanced Information security operations: > Adapted Information Security guidelines to company-wide objectives (Business, users, Project, OS, Software, Network) - Identified risks: operational, projects and software - Setup mitigation: including alignment to strategic plans, security internal requirements, vulnerability management, patch management, audits, backups > Created, deployed, and run the internal information security incident management (scope: vulnerabilities, incident, crisis management, business continuity and disaster recovery) > Responded to clients and internal requests such as requests for proposal, audits, support questions.

For multiple clients (Banking and Industry) : > Information Security policies, internal processes and application gap analysis, reviews and enhancements > Disaster recovery: Network and applicative cartography, risk assessment, contingency findings, tests schedule > Application Security: For key application, identified gaps and scheduled changes with architects > Incident Management: Operational risk management dashboard creation > Identity and Access Management (IAM): defined, and adapted internal IAM policy > Risk Management: Banking software risk analysis and identification of mitigation actions

For a Bank in Lebanon: > Business Continuity: Create Business Impact Analysis (BIA) for the bank through interviews, identify key assets and processes, and their recovery processes. For a French Service Provider: > Information Security: Create and enhance Dashboards for compliance to ISO 27001, corrective, preventive measures > Risk Management: Identify risks and mitigations at Business and IT level > Business Continuity and Crisis Management: Enhancement of process, participation in tests