Moaad El Farouki

– Risk analysis and monitoring: IT and cyber risk assessment of projects, including advice on security, resilience and project risks, and recommendations for mitigation measures, – Assistance in performing security audits/pentests and remediation of vulnerabilities, – Expert support in the indentification of security solutions, – Contribute to the department's risk governance and to the monitoring of risks for all projects, including regular reporting on risks.

– Audit and implementation of ISMS in compliance with ISO/IEC 27001/02 and information security risk management (ISO/IEC 27005, EBIOS) – Assistance to compliance with moroccan laws and directives related to Cybersecuirty (05-20, 09-08, DNSSI) and cybersecurity standards (GDPR, NIST, CIS Controls, etc.) – Assistance to CISOs, development of policies /procedures related to information security and assets classification. – Business continuity : implementation of BCMS (ISO 22301), BIA and risk analysis, business continuity strategies and plans, IT recovery plans, etc. – Assessment of IS security, drafting diagnostic reports and recommending action plans to remedy deficiencies.

– IT risk assessment and conduct of audit engagements (Statutory audit, ISAE 3402) according to applicable regulations and standards (SOX/PCAOB, ISA). – Audit of the design and operational effectiveness of IT general controls (ITGC) on the application and infrastructure layers of financial systems. – Evaluate weaknesses in existing controls (Organization and governance, Policies and procedures, Operational security, Access management, Change management, ...). – Assurance on third-party services: Assessment of the contractor's internal IT controls to provide reasonable assurance to customers to the risks affecting their financial data (ISAE 3402).

– Design and development of Web applications. – Integration of security measures against known threats (SQL injection, XSS, DDoS, etc.). – Hardening of application code – Adherence to secure development best practices – Tools: Ez Publish 5, Symfony 2.8, Lamp, Solr, SoapUI, Git, Redmine, jQuery.