Marie LETHIEC
Deputy CISO | GRC & Information Security
Salaire / Taux journalier
Bordeaux, France
Freelance, ouvert au CDI
Peut venir sur site
Expertises
Langues
À propos
Introduction
Deputy CISO with 7+ years specializing in cybersecurity, GDPR compliance, and ISO 27001 implementation across healthcare and transport sectors. Expert in security risk assessments (EBIOS method), regulatory compliance frameworks, and building comprehensive ISMS from gap analysis to deployment. I help organizations achieve security certification and regulatory compliance while optimizing operational processes.
Expérience de travail
Deputy CISO & GDPR Compliance Consultant
Audensiel
nov. 2024 - Présent
2 ans
Bordeaux, France
Keolis Bordeaux Métropole Mobilités - Deputy CISO & GDPR Compliance Consultant (7 months) - Led cybersecurity projects and coordinated cross-functional initiatives - Ensured regulatory compliance with GDPR and industry-specific standards - Integrated security requirements into projects based on “Security by Design” and “Privacy by Design” principles - Managed risk assessments and contributed to risk mitigation strategies - Conducted security awareness sessions and training for staff SNCF Voyageurs – Cybersecurity Integration Consultant for IT Projects (since June 2025) - Integrated security into IT projects from design and planning through to production release - Conducted security prequalification and risk assessments (EBIOS method), defined and monitored security requirements - Supported IT and business teams in implementing security measures - Provided security reviews for changes and managed security incidents - Produced cybersecurity deliverables (analysis reports, risk assessments, meeting minutes) and performed reporting (security committees, key security indicators)
Compliance & Process Optimization Project Manager (Consultant)
meSoigner
janv. 2024 - déc. 2024
1 an
Bordeaux, France
- Coordinated strategic compliance and governance initiatives in the digital health sector to improve operational efficiency and regulatory alignment - Established and managed an ISO 27001 & HDS-based Information Security Management System (ISMS), from gap analysis to policy deployment, staff training, and internal audits - Ensured ongoing compliance with GDPR and national health platform-specific security requirements (Mon espace santé), including continuous monitoring and updates - Defined quality objectives and rolled out standardized, optimized processes with associated KPIs and training programs
GPLExpert
sept. 2018 - déc. 2022
4 ans 4 mois
Quality & Risk Management Lead
sept. 2020 - déc. 2022
2 ans 4 mois
Leadership of Internal Projects & ISMS Oversight - Led company-wide initiatives (design, implementation, optimization) to improve internal process efficiency and client service delivery - Oversaw the maintenance and continuous improvement of the Information Security Management System (ISMS) in line with ISO 27001 – acted as Deputy CISO - Ensured compliance with multiple regulatory and certification frameworks: ISO 27001, HDS (Health Data Hosting), Qualiopi, GDPR, ANSSI (PACS/PAMS), NIS Directive - Defined and tracked security & quality KPIs, and created executive-level reporting dashboards - Redesigned and optimized operational and delivery processes: formalization of workflows, documentation, deliverables, and service offerings - Managed technical and organizational change: from needs assessment and risk analysis to deployment and final validation - Conducted risk assessments aligned with ISO 27005 and EBIOS; developed incident response and crisis management strategies - Coordinated internal/external audits and implemented continuous improvement actions - Maintained documentation across quality, security, and compliance domains - Delivered training and awareness programs to strengthen information security culture and operational performance Client Project Delivery (in parallel with internal responsibilities): - Delivered consulting services on IS governance, GRC, and HDS compliance - Participated in pre-sales processes and designed tailored service proposals - Led project execution including deliverable production and documentation - Supervised project managers and coordinated client infrastructure hosting projects
Ad hoc Communications & Marketing Lead (part-time)
avr. 2021 - mars 2022
1 an
Led initial development of the communication and marketing function at GPLExpert, including strategy definition, team setup, and coordination of external communications, events, and subcontractors (part-time role, prior to handover).
Project Manager – Information Security & Compliance
sept. 2018 - oct. 2020
2 ans 2 mois
Internal Projects (GRC & Certification Readiness): - Led a strategic cross-functional program to optimize internal processes and client services in preparation for ISO 27001 and HDS (Health Data Hosting) certification - Defined the target security organization based on ISO 27001 best practices - Conducted maturity and gap assessments against ISO 27001, HDS, and GDPR requirements - Designed and implemented the Information Security Management System (ISMS) - Supported compliance transformation across multiple departments (IT, Operations, HR, Legal, Management) and created key governance roles (CISO, Quality Manager) - Introduced continuous improvement and quality management processes - Performed risk assessments using ISO 27005 and EBIOS - Managed health data hosting (HDS) projects and delivered related documentation Client Projects (Consulting / Project Ownership Support) - Delivered consulting services for IS governance, compliance, and HDS hosting projects - Participated in pre-sales activities and ensured end-to-end project execution - Supervised project managers and coordinated client hosting implementations
Formation
PECB
ISO/IEC 27001 Lead Implementer Training
2018 - 2018
2 mois
Licences et certifications
ISO 27005 Risk Manager
Délivré le : janv. 2019