Najmeddine Ben Mefteh

- Member of the TRM (Technology and Risk Management) expertise center, we were expert support to all Natixis CISOs and supported them for better integration of cross-functional processes - Awareness and definition of security strategies to be adopted at the IT project level involving emerging technologies - Coordination of work around the overhaul of Patch Management controls and system obsolescence management at the Group level - Work with IT security teams to build permanent level 1 / level 2 cyber controls - Work on risk mapping and maintenance of the TRM model (the IT risk management model applied by CISOs within their businesses) - Support for cross-functional business and IT projects

- Cybersecurity expert support of IT projects for the Corporate and Investment Bank (CIB) - Identification of needs and associated regulatory constraints (MIF2, Lagarde Controls, EONIA, etc.) - Construction and implementation of specific permanent controls - Management of security incidents and monitoring of remediation plans for the various front-to-back IT systems (Murex, Sophis, Horizon, Electronic Trading Platforms, etc.) - Maintenance of the inventory of critical business assets and business impact analysis for the entire IS - Monitoring of intrusion tests and coordination of the implementation of SOC detection scenarios

- Identification of security needs for the various professions in collaboration with the CISOs - Proposal of a service offer based on user behavior detection and anti-fraud scenarios - Flows analysis and logs standardization in collaboration with the various MOE/MOA of the business applications - Proposal of incident processing procedures for the various scenarios - Improvement of the incident qualification process and management of false positives - Maintenance of the SIEM architecture and management of SOC infra incidents in collaboration with the technical teams - Management of the SOC by proposing different KPIs and setting up activity reports

- Participation in the definition of security rules and procedures to be implemented to minimize the identified risks. - Monitoring and detection of vulnerabilities affecting the Kering information system. - Coordination of international security teams to ensure regular verification of the security of the information system - Response to incidents and management of the business continuity of the Kering IS - Implementation of change management procedures and monitoring of IT developments - Guarantee level 2/3 support activities for security solutions and products. - Definition of KPIs and KRIs and regular drafting of security reports for Kering management

- Conducting intrusion tests, vulnerability scans and compliance audits on behalf of our clients - Participating in the deployment and development of the ISMS of the internal CERT service - Implementing IS security policies, ISMS governance, etc. on behalf of our clients - SIEM Administrator: Implementing and auditing Splunk architectures - SOC Analyst: Correlating logs, creating dashboards and alerts - Pre-sales: Identifying customer needs and proposing appropriate security solutions

- Pre-sales manager for IT security products: • Facilitating workshops and technical presentations • Studying and carrying out POCs (Proof Of Concept) • Identifying customer needs and proposing technical solutions - Implementing and delivering products: • Intervening for the installation and configuration of products and systems • Ensuring the proper functioning, correct sizing, security and flexibility of the solutions implemented • Ensuring the relationship with the customer - Maintenance and after-sales: • Monitoring and resolving incidents • Ensuring continuity of services, product availability and system optimization • Providing advice, assistance and technical support to customers