Nabil MHIJAN

Led the strategic implementation of cybersecurity and third-party risk management (TPRM) processes, significantly enhancing system integrity and compliance across the organization. Directed security protocol integration in IT projects, providing essential guidance on cybersecurity risks, regulatory compliance, and documentation to support both IT and business objectives. Championed adherence to the cyber program and Digital Operational Resilience Act (DORA), ensuring operational excellence and resilience through comprehensive risk management frameworks. Established decision-making committees for outsourcing and developed key deliverables for risk identification, playing a crucial role in securing digital operations.

As a cybersecurity consultant, my mission has been to deliver comprehensive expertise in the creation and editing of security documents for diverse cybersecurity campaigns. This role involves crafting guidelines, while specializing in topics such as firewall management, IoT security, and the convergence of industrial and information technology. Furthermore, I provide invaluable training support, ensuring that clients are well-prepared to mitigate risks and secure their digital environments.

Responsible for ensuring that the security services provided by my team meet the needs and expectations of the customer. and I oversee service delivery activities, manage necessary resources, and work closely with the client to continuously improve service quality.

La mission consiste à accompagner le CISO dans la définition de la feuille de route stratégique cyber sécurité. A cet effet, plusieurs programmes sont menés en parallèle. • Encadrement et pilotage projet cyber. Méthodologie, budgétisation et Planning, communication et préparation des chantiers/ Pilotage des audits et suivi du plan de couverture risques cyber. • Intégration de la sécurité dans les projets Accompagner les chefs du projet à intégrer les exigences de sécurité les plus pertinentes aux sujets étudiés.

In collaboration with members of the security team, the goal is to maintain a highly information and cyber security level within the organization. • Conducting cyber risk analysis according to the EBIOS methodology. • Performing quantitative risk analysis on critical assets using the Annual Loss Expectancy model to quantify the potential financial impact of cybersecurity threats using a combination of risk assessment methodologies and statistical analysis, providing insights for risk management and mitigation strategies. • Conducting business impact analysis on different systems to identify the most critical systems and business processes to help determine the appropriate level of investment in risk management and recovery measures. • Conducting compliance security audits and penetration tests of industrial IT infrastructures and web-based platforms in order to monitor the effective implementation of the Group's ISP. • Coordinating with DPO to make sure that GDPR constraints are implemented.

Collaborated closely with the Chief Information Security Officer (CISO) in developing and implementing a robust Information Security Management System based on ISO 27001 standards, enhancing the company's resilience against diverse cyber threats and bolstering overall cybersecurity posture.