Jihane Bouamri

• Brainstorming with technical architects the solutions to be implemented to compliant to LPM • Defining the action backlog for IT and business departments. • Establishing, facilitating, and overseeing operating committees (opcos) and steering committees (steerco). • Establishing security and approval documentation. • Monitoring the progress of all projects. • Managing budgets and schedules. • Conducting risk analyses. • management of the PASSI LPM audit

§ Management: • Managing a team of 13 individuals and all the CISO teams of the subsidiaries of BNPPARIBAS AFRICA REGION § Governance: • Adapting Group security policies for the Africa region. • Establishing, facilitating, and overseeing security committees. • Assisting local CISOs. • Defining and consolidating IT security dashboards for the entire Africa region. • Managing security alerts and incidents. § Security in Projects: • Providing security guidance to all projects in the Africa region. • Conducting IT security risk assessments. • Assisting project managers in implementing a code review solution. § PCIDSSI: • Overseeing the certification process for 6 subsidiaries within the Group. § Ongoing Control: • Performing monthly vulnerability scans. § Supplier Management: • Reviewing supplier contracts and incorporating security clauses. • Conducting security audits of sensitive suppliers. § Group Cyber Program NIST: • Managing and overseeing IT security projects.

§ ISO 27001 ISMS Oversight: • Managing an ISO 27001 certified scope since 2011. • Assisting a business unit at Docaposte in achieving its first ISO 27001 certification. § Risk Analysis: • Developing a project risk analysis method and creating associated tools. • Integrating security into "legacy" and "agile" applications. • Conducting security studies and monitoring across all project phases for new applications. • Implementing data protection impact assessments for all sensitive projects. § Security in Projects: • Overseeing the implementation of a Dynamic Application Security Testing (DAST) solution across all Docaposte business units. This included solution selection, a Proof of Concept (POC) involving 100 developers, presenting the solution to Docaposte's CTO and CIO, overseeing solution deployment, developer training, defining the strategy and usage workflow for the solution, and establishing KPIs/KRIs for project managers, CISOs, and SOC. § Ongoing Monitoring: • Conducting security audits in France and internationally (Morocco, Spain, overseas territories, etc.). • Organizing and overseeing technical audits (penetration tests, vulnerability scans). • Providing recommendations and tracking action plans with project managers. § Awareness: • Managing the Group's cybersecurity awareness program. • Staying updated with technology trends (member of: CLUSIF, CESIN, Orange Cyberdefense).

- Managing and monitoring projects from the initialization phase to user adoption phase. - Organizing and conducting workshops to gather business requirements. - Writing detailed functional specifications.

Participated in the implementation of a multidimensional asset and investment management tool for all ACCOR hotels: Conducted conference calls with financial directors and hotel managers to gather requirements. Drafted the specifications document. Monitored development with the engineering team. Conducted testing and acceptance. Developed and created automated summary reports: designed macros using VBA. Master's thesis topic: Dashboard usage in the investment management of the ACCOR Group. Evolved the originally defined management tool into a decision-making system. Prototyped decision-making tools provided to the engineering team.

Utilized the SIX SIGMA methodology for process improvement. Developed using VBA. Drafted operational procedures. Documented the conducted analyses. Conducted user training module presentations.