Nathan De Jesus
Senior Information Security GRC Consultant | ISO 27001
Salaire / Taux journalier
Annecy, France
Mobilité : Lyon, Grenoble, ...
Freelance, ouvert au CDI
Peut venir sur site
Expertises
Langues
À propos
Introduction
ISO 27001 Lead Auditor with 5+ years in Information Security GRC, specializing in compliance frameworks for SMEs and SaaS companies. Successfully led 90-day ISO implementation for 4M+ user platform and delivered GDPR/NIS2 compliance across retail, construction, and energy sectors. Expert in risk assessments, policy development, and audit readiness with Lean Six Sigma optimization approach.
Expérience de travail
Freelance Information Security GRC Consultant
Nathandejesus.comFreelance
oct. 2024 - Présent
2 ans 1 mois
Greater Annecy Area
Led a Roadmap ISO 27001 implementation from scratch for a Swiss SaaS company (+4M users), designing a 90-day action plan and proposing GRC tools for policy management, risk tracking, and audit automation. Supported SMEs and mid-size companies across retail, construction, and energy sectors in building GRC frameworks aligned with ISO 27001, GDPR, and NIS2. Designed and implemented compliance documentation templates, access governance models, and policy review processes to strengthen audit readiness and evidence traceability. Delivered risk assessments (EBIOS RM / ISO 27005) and conducted awareness & training sessions to improve cyber maturity and compliance culture. Advised management teams on process optimization and continuous improvement, leveraging Lean Six Sigma Black Belt methodologies. Developed a consulting presence through nathandejesus.com and platforms such as Malt and Freework, offering remote advisory services in GRC & Information Security.
Cybersecurity & VoIP Engineer
CSI Copy Serv'Info
oct. 2022 - oct. 2023
1 an 1 mois
74540 Saint-Félix, France
Managed cybersecurity and VoIP projects for multi-site SMEs, improving system reliability and incident response time. Structured and centralized security documentation (IT Glue) and standard operating procedures, enhancing knowledge management. Secured cloud access and identity management (Azure AD / AWS) and supported GDPR compliance efforts. Delivered user awareness programs, anti-phishing campaigns, and technical workshops, driving tool adoption and reducing incident tickets. Applied ITIL and COBIT frameworks to align technical operations with governance best practices and continuous improvement.
Résiliences
oct. 2020 - oct. 2022
2 ans 1 mois
Annecy, France
Information Technology Security Engineer
oct. 2021 - oct. 2022
1 an 1 mois
Annecy, France
Led cybersecurity projects across healthcare, education, and industrial environments, aligned with ISO 27001, ISO 27005, NIST, and GDPR frameworks. Rolled out Multi-Factor Authentication (Duo Security), strengthening identity and access management controls. Conducted technical and organizational audits and documented IAM policies and ISO-compliant procedures. Implemented proactive monitoring with PRTG and built KPI dashboards to track and report on security performance. Supported security awareness initiatives and change management aligned with ITIL v4 best practices.
Information Technology System Network Administrator
oct. 2020 - oct. 2021
1 an 1 mois
Annecy, France
Managed secure IT infrastructures for public and healthcare clients, under Windows and Linux environments. Administered firewalls (Fortinet, Stormshield) and Wi-Fi security (Aruba), ensuring CNIL and GDPR compliance. Designed and tested BCP/DRP plans, improving business continuity and disaster recovery capabilities. Standardized IT operations with ITIL v4-aligned processes and centralized documentation. Contributed to digital transformation and continuous improvement initiatives using Lean Six Sigma principles.
Information Technology Technician
Neatem
mars 2019 - mai 2020
1 an 3 mois
77183 Croissy-Beaubourg, France
Provided L1/L2 IT support and infrastructure setup for clients in legal, finance, and industrial sectors. Delivered network deployments, server migrations, and VoIP rollout. Ensured SLA compliance and user satisfaction. 3CX · GLPI · TeamViewer · VMware · AD · PowerShell · Nagios · DHCP/DNS · Citrix
Information Technology Intern
Disneyland Paris
févr. 2014 - mars 2014
2 mois
Paris et périphérie
Early experience in enterprise IT backstage at Disneyland Paris, sparking long-term interest in infrastructure.
Formation
Skills4All - Spécialiste du digital learning certifiant
Lean Six Sigma Black Belt – Certified (PeopleCert)
2024 - 2025
1 an 1 mois
ECEMA
Master's degree
2021 - 2023
2 ans 2 mois
Éstiam • École supérieure des technologies de l'information appliquées aux métiers
Master's degree
2021 - 2023
2 ans 2 mois
Université Savoie Mont Blanc
Bachelor's degree
2020 - 2021
1 an 2 mois
IPSSI
Associate's degree
2018 - 2020
2 ans 2 mois
Lycée Martin Luther King
Baccalauréat Scientifique option Sciences de l'Ingénieur
2015 - 2018
4 ans
Licences et certifications
Cisco Certified Network Associate Security (CCNA)
Délivré le : oct. 2025
CSNA Stormshield
Délivré le : oct. 2025
SecNum Cybersecurity
Délivré le : oct. 2025
RGPD
Délivré le : oct. 2025
ISO 27001 Lead Implementer - Information Security Certification
Délivré le : août 2025
Lean Six Sigma Black Belt
Délivré le : janv. 2025
3CX
Délivré le : janv. 2023
Learning ITIL®
Délivré le : févr. 2022
Les fondements de la communication
Délivré le : mars 2020
Portfolio
