
Joseph MODI
Cyber & IT Transformation Program Management | A
Salaire / Taux journalier
Paris, France
Freelance, ouvert au CDI
Expertises
Langues
Expérience de travail
Project Manager – DSPM & Data Security Governance
Groupe BPCEFreelance
oct. 2025 - Présent
1 an 1 mois
Led the DSPM (Data Security Posture Management) program, coordinating Cybersecurity, IAM, SOC, Infrastructure, and Business teams across multiple international entities. Managed the deployment and governance of the Varonis DSPM platform, covering sensitive data discovery and classification, continuous security posture assessment, behavioral analytics, and automated remediation capabilities. Oversaw access governance and recertification campaigns (DAG – Data Access Governance) across SharePoint Online, OneDrive, and NetApp environments, reducing excessive permissions, data overexposure, and compliance risks. Identified, assessed, and remediated sensitive data risks, including the detection of abnormal access patterns, mass downloads, risky sharing activities, and the implementation of risk-based corrective action plans. Defined and monitored Data Security KPI/KRI frameworks while supporting AI security initiatives, contributing to the protection of sensitive information against emerging risks associated with Artificial Intelligence adoption and attacks targeting AI models.
Founder & CEO
Careveo – Santé connectée pour l’AfriqueFreelance
déc. 2023 - juil. 2026
2 ans 8 mois
Group Project Manager - DORA & NIS compliance
Groupe CovéaFreelance
sept. 2022 - oct. 2025
3 ans 2 mois
Hybrid
NIS & DORA compliance implemenation Risk management of critical assets Operational resilience testing of critical assets Application mapping and implementation of the application-server link chain (CMDB) Server hardening Account inventory and remediation (authorization, identification, authentication)
GDPR and IA Act expertise consultant
EnedisFreelance
août 2021 - août 2022
1 an 1 mois
Hybrid
Drafting of GDPR compliance reports Production of GDPR compliance and progress reports, preparation of managerial reviews, Organization of the GDPR harmonization repositories AI Act implementation study - Feasibility and impact study
AXA Group OperationsFreelance
sept. 2019 - oct. 2021
2 ans 2 mois
Paris, France
Group project Manager "Remediation action plans following ransomware attack"
mars 2020 - oct. 2021
1 an 8 mois
Paris, France
Cyber security - ransomware infection - Mitre Att&ck framework - SAFe Agilist - Endpoint detection and response (EDR ) - AWS- Azure- Active Directory (AD) - SOC - Data protection ...
Group Project/Program Manager: Data Leakage Prevention, security rating services, cyber resilience
sept. 2019 - mars 2020
7 mois
7620 Paris, Danemark
Data protection - Data classification - Security rating - BitSight - entities onboarding
Director of the group's GDPR compliance program | GDPR expertise
Europcar Mobility GroupFreelance
janv. 2018 - août 2019
1 an 8 mois
Data subject rigths - Consent management - privacy & security by design - PIA/DPIA - Data leakage prevention (DLP) - PSD2, PCI-DSS compliance - connected car, chatbot, biometric compliance - GDPR audit - compliance action plan- agile process
Project Director | entreprise PMO | DPO
Economat des armées
janv. 2012 - janv. 2017
5 ans 1 mois
Ministère de la défense (EdA), Pantin
IT strategic committee, GDPR program director, digital transformation advisor, ...
Lead Project Manager
AXA en France
janv. 2012 - janv. 2012
1 mois
92000 Nanterre, France
Project leader
Operational Project Manager - consultant
ENEDIS (ex ERDF)
janv. 2010 - janv. 2012
2 ans 1 mois
IT consultant
EDF
janv. 2009 - janv. 2010
1 an 1 mois
Operating manager
Eni
janv. 2007 - janv. 2009
2 ans 1 mois
Engineer of study
Capgemini
janv. 2006 - janv. 2006
1 mois
Formation
HEC Paris
Master's degree, Information Technology
Résultat : Très bien
Mines Paris - PSL
Master's degree, Information Technology
Licences et certifications
TOGAF (architecture d'entreprise)
Délivré le : sept. 2026
SAFe Agilist
Délivré le : janv. 2021
Certificate in Blockchain Technologies: Business Innovation and Application
Délivré le : avr. 2019
ISO 27001 Lead Implementer
Délivré le : janv. 2019
CESA (Certificat d’Enseignement Supérieur des Affaires) : Pilotage de la transformation digitale
Délivré le : janv. 2017
DPO (Data protection officer)
Délivré le : janv. 2017
PMP (Project Management Professional)
Délivré le : janv. 2014
TOGAF
Délivré le : janv. 2014