Nicolas Pontoizeau

In prevision of NIS2 regulation, I supported Alternadom in the integration of a GRC solution designed to provide a centralized and comprehensive view of the organization’s security posture. The cybersecurity framework applied was MonAideCyber, developed by the French National Cybersecurity Agency (ANSSI), which was seamlessly integrated into the GRC platform Ciso-Assistant. The work was carried out in the following phases : • Feasibility study : Assessing the relevance of the Ciso-Assistant solution for the SME Alternadom • Integration of MonAideCyber requirements and controls into Ciso-Assistant • Recording the MonAideCyber assessment results in the Ciso-Assistant audit module • Followed the security measures implementation and lead meetings on weekly basis • Documentation This assignment resulted in a thesis defended at the University of Troyes (UTT) in septembre 2025

Owned the end-to-end implementation and operations of a low-code platform hosting operational databases supporting reporting activities for Direction Operations et Direction Marketing across 28 countries (1,000+ users, including top management and ExCom). The application is classified moderate criticality with RTO/RPO: 24h. Solution assessment: Presented to solution to IT Validation Committee (architecture, compliance, security, continuity, data). SLA management: Defined with the Business Owner; monitored and reported service levels. Risk management: Maintained quarterly risk register; drove mitigation actions. Budget control: Managed team budget in Clarity; oversaw integrator T&M rates. Licensing: Negotiated license volumes with the editor (Claris, Apple subsidiary). Portfolio review: Led annual review of the application portfolio. Third-party due diligence: Ensured provider device updates and security awareness training. GDPR/NIS 2: Ensured database compliance and evidence of controls. Dora compliance: support for the implementation of the DORA regulation within the IT department Vulnerability management and sharing of security best practices Team leadership: Recruited and trained a designated backup.

In charge of the delivery service of applications routing orders on funds. The team is made up of 4 people on-shore including me and 6 people off-shore based in India. The SD team implement ITIL model and is in charge of: - fixing incidents - organizing the team - training new comers - publishing KPI service delivery indicators (deadlocks, number of incident, emergency procedure...) - communication to other teams and writing incident report - Service transition - Capacity Management - Problem Management

In charge of Java and Delphi applications at Secretariat Général de la Commission Bancaire (the French regulator for banks)

Contractor for Softeam. I developed front-office tools for the FOREX market in one of the 20 most critical application of the bank (Enterprise)

Contractor for Steria. I was in charge of the support of Asian languages (Chinese in particular) in the TARS (the Travel Accor Reservation System).

Contractor for Steria. With a team of 8 people, I developed a java based webservice for the DRACCO project (Données Référentielles et Agrégation du Contexte Client Orange). The software is a search engine that aggregates accounts and plans of a particular customer.

Pre-sale consultant in charge of the English-French communication for UCB (union crédit bancaire) projects developed in India.