Mohamed HARROUNI ALAOUI

As a cybersecurity consultant at CGI, I have worked with various public institutions and private sector clients on strategic risk management and compliance engagements. I supported several ministries in the risk assessment and accreditation of their information systems. This involved conducting structured risk analyses to evaluate system maturity, identifying potential threats, and defining action plans aligned with national cybersecurity standards (ISO 27005 /EBIOS RM) to reduce residual risk. I also guided organizations through ISO/IEC 27001 and NIS2 compliance processes, helping implement effective information security management systems and align security controls with operational and regulatory requirements. Currently, I am acting as deputy CISO for a financial services company. I assist with regulatory compliance, security integration within business and IT projects, risk management, and resilience planning—including business continuity and crisis response Strategies (DORA) Across all missions, I apply a structured, risk-based approach and work closely with stakeholders to strengthen security posture and foster a culture of resilience.

- Analyzing all cyber threats for a SaaS cloud application (office 365) with the methodology EBIOS RM. - Supporting clients to set up and improve their ISMS according to ISO 27001. - Develop and testing Business Continuity Plans (BCP) and awareness in cyber crisis management.

- Analyzing and Traitement all Customer requirements and complaints. - Plan and Flow The Audit process IATEF 16 949 - Flow the implementation of the Quality tools for the automotive industry (Core Tools). - Measuring and Analyzing all quality data and keys of performances

- Management of the quality teams in terms of preventive and systematic actions - Set up and analyze performance indicators (KPI) - Set up all monitoring and quality control and traceability documents - Audit the evolution of the manufacturing process - Folow health and safety procedures