Mohamed-Nabil Kachemir

- Defined and implemented the Group Cyber and GRC governance framework (ISSP), aligning security strategy with business and regulatory requirements - Led the successful implementation of the Group Information Security Policy (PSSI), structured around the NIST 2.0 framework - Provided strategic oversight and guidance to local entities in coordination with the Group CISO, strengthening governance consistency across international operations - Acted as governance advisor to the Group CISO Office, supporting executive decision-making and cyber risk prioritization - Contributed to the structuring and maturity uplift of the Group’s cyber risk management model Outcomes: - Successful deployment of a Group-wide PSSI aligned with NIST 2.0 - Establishment of a unified cyber governance framework across multiple international entities - Increased executive visibility on cyber risk exposure and prioritization - Strengthened regulatory alignment and audit readiness - Enhanced coordination between central CISO Office and local security teams - Measurable uplift in cyber maturity and organizational resilience

- Provided operational advice on Cybersecurity and GRC to assist ServiceNow experts in configuring the IRM module - Developed presentation materials demonstrations on various ServiceNow modules for clients in Montreal and Luxembourg - Designed Proof of Concepts in collaboration with ServiceNow implementation experts

- Led strategic ServiceNow Security 360° assessments to align platform governance with enterprise risk and regulatory frameworks. - Led ISO 27001:2022 Audits to assess the effectiveness of Information Security Management Systems (ISMS) - Led NIST CSF 2.0, PCI DSS, SWIFT Maturity Assessments to measure cyber maturity across key functions - Designed governance structures for cybersecurity transformation initiatives, enhancing organizational resilience - Served as the principal cybersecurity advisor to Executive Committees, delivering strategic and operational recommendations

- Implemented the Non-Financial Risk Management function in alignment with ECB, EBA, and Basel II/III guidelines - Developed the Internal Control function utilizing the Three Lines of Defense model and COSO ERM frameworks - Established the Information Security and Cybersecurity function, focusing on governance, IT risk management, and access control management

- Transition Manager of the Cybersecurity, Governance, Risk Management & Compliance service offering (GRC) for Luxembourg - Service Management Consulting - CyberTech & eGRC platform Benchmarking (ServiceNow, Metricstream, Protiviti...) - Cyber and IT Security Frameworks (NIST, ISOx, CIS Controls) - Tools Development & Management for IT and Audit Security Governance - Crisis Management and Business Resilience - EDR/xDR, DLP and IAM solutions, Investigation & Social engineering campaign

- Delivered CIO advisory services at Société Générale Luxembourg, enhancing business management consulting and IT operational resilience - Developed commercial propositions focused on data protection and privacy compliance, including GDPR and ePrivacy regulations - Optimized business and IT costs in financial services, providing strategic recommendations for steering committees

- Led cybersecurity and digital trust initiatives for top clients including Groupe PSA Switzerland (Stellantis), Skyteam, BGL BNP Paribas, European Investment Banking, Edmond de Rothschild, Chamber of Deputies Luxembourg, Globality Health... - Developed commercial propositions and provided IT management consulting to enhance operational risk management in financial services - Conducted strategic reviews and assessments for third-party risk management, ensuring compliance with GDPR and data protection regulations, ISO27001, PCI DSS, SWIFT Standards

- Collaborated on financial planning and analysis (FP&A) to drive strategic decision-making - Led initiatives in digital strategy and IT governance to enhance organizational agility - Spearheaded new technology ideation and lean process redesign to achieve business-IT alignment

- Employed a solution-based approach to problem-solving using Design Thinking principles - Facilitated Agile implementation processes, including Development, Features, PI Planning, Backlog Management, and Testing - Ensured high-quality deliverables through rigorous Quality Assurance and iterative feedback loops

- Collaborated on aligning business and IT strategies to enhance operational efficiency - Conducted thorough analysis of IT and systems processes to identify areas for improvement - Developed and enforced IT governance policies to mitigate risks and ensure compliance - Performed IT audit and controls reviews to strengthen organizational security measures

- Conducted comprehensive systems analysis and evaluation to enhance market data management processes - Developed strategic finance recommendations for clients, leveraging analytical thinking and financial management skills - Engaged in management control activities, ensuring alignment with organizational objectives and client needs

- Conducted thorough analysis and evaluation of IT systems to ensure regulatory compliance - Developed security recommendations and mitigated compliance findings to enhance operational integrity - Employed a risk-based approach to audit mitigation, strengthening the overall security posture of the organization