Massyle Ben Abdesselam

Implemented and drafted cybersecurity risk management processes to ensure compliance with industry standards and regulatory requirements. Conducted thorough risk assessments, identifying vulnerabilities and prioritizing risks based on potential impact and likelihood. Developed a comprehensive risk management framework, including policies for threat identification, vulnerability assessments, and incident response procedures. Conducted external audits to assess compliance and security measures. Supported and evaluated client compliance with Law 25 on the protection of personal information. Designed and delivered training programs, developing tests and assessments tailored to employees needs.

Planned, executed, and monitored cybersecurity projects, collaborating with internal departments and external partners to ensure optimal information security and compliance with PCI DSS and regulatory requirements. Facilitated IT risk management training and promoted a culture of risk-aware decision-making within the IT community. Collaborated with government agencies and partners to align security practices with industry standards and enhance overall compliance.

Identify, assess, and manage information security risks, taking potential threats and vulnerabilities into account. Evaluate risks associated with third-party partners and suppliers, considering access, sensitive data, and business processes. Establish and maintain strong relationships with third parties, including coordinating security assessments, audits, and compliance exercises. Conducted risk and control assessments using Archer to identify vulnerabilities and recommend mitigations. Established continuous monitoring mechanisms to ensure ongoing compliance and maintain an effective control environment. Implement continuous monitoring mechanisms to assess third-party compliance and coordinate third-party security audits. Analyzed data related to risks and deficiencies, creating visualizations and reports to communicate insights and inform strategic decisions. Educate and raise awareness among third-party partners and suppliers on best practices in information security.