Maxime Rapaille

CISO As a Service for several customers. Cyber Security Audit Security - Privacy - Intelligence - Security Awareness Security and Risk assessment in BE,FR,LU.. (Banking, Industry, Retail..) GRC and Security Audit GDPR compliance assessment

Emmera SPRL is a company Specialised in Security, confidentiality, Intelligence CISO as a Services. Maxime Rapaille is Consultant, and founder of the company. Fields of expertise : Cyber Security, Physical Security, Security Management, Interim Management Privacy, confidentiality, Intelligence, CISO - RSSI

Chief Security officer . Working for the General Management. Responsible for Physical Security, information Security and Data Privacy at STIB. Crisis management (22/03/16 attacks in Maelbeek) Relation with autorities, intelligences services, etc.. Acting as Data Protection Officer (ai) : - Establish the Security Startegy and Program for the company : - Access control, - Physical security policies - Risk Assessment - Physical Security control - Security Awareness - Terrorism - Cybersecurity - Data Privacy - Security Governance - Integration of Cyber Security and Physical Security Started the project for the GDPR compliance - Ensuring STIB took the necessary action to start a GDPR compliance program. Hiring of the DPO for STIB Acting as a temporary DPO (Data Protection Officer) GDPR specialist Physical security management Counter terrorisme and management of radicalisation problems. Regular contact with intelligences services. Direct report to STIB management Board, SVP CEO and DCEO. Investigations. Member of CPPT and CE

Chief Information Security Officer. - Data protection; - Responsible for Data privacy in all aspect of the company - Setting up, follow up and communication of the security policies; - Setting up and Development of the Security Program and budget - Development, publication and integration of policies related to systems security; - Design and management of training programs in order to ensure a good understanding of the security need within the company; - Design and implement Security Awareness for the Company - Work in close collaboration with operational units in order to facilitate risks management processes evaluation; - Ensure contact with the company's Security Architect in order to align and coordonate strategies; - Definition of a risks evaluation planning (including reporting and supervision of negative constatations processing); - Development and management of effective take-over policies and procedures after an IT disaster - Develop and maintain information Security Incident response - Establish and Maintain contact with authorities; - Negotiating Solution to gain a balance between high security and working systems; - Investigation on security incidents - Maintain and animate a multi-discipline Security management committee - Risk assessment, coaching - Request coordinate and evaluate result of security assessment to office system, transportation systems and Scada - Physical Security (Access control, prevention, ..)