Oumar DIAW
Chief Information Security Officer
Salaire / Taux journalier
Paris, France
Freelance
Peut venir sur site
Expertises
Langues
À propos
Introduction
Global CISO with 10+ years securing critical government and financial infrastructure across multi-jurisdictional operations. Achieved zero critical breaches at French Treasury while reducing security incidents by 40% through enterprise SIEM/EDR deployment and strategic governance frameworks. Specialized in regulatory compliance (NIS2, GDPR, ISO 27001) and risk management, delivering measurable security transformation for highly regulated organizations.
Expérience de travail
Direction general du Trésor (French Treasury)
sept. 2023 - Présent
3 ans 2 mois
69340 Francheville, France
Global Chief Information Security Officer (CISO)
févr. 2024 - Présent
2 ans 9 mois
69340 Francheville, France
– Led organization security transformation across global operations, directing cross-functional teams of 8+ cybersecurity professionals and establishing governance frameworks that achieved zero critical data breaches over 12 months in highly regulated environment – Orchestrated comprehensive risk management program implementing enterprise-wide IT/IS frameworks ensuring regulatory compliance across NIS2, GDPR, and ISO 27001, directly supporting continuity and digital transformation initiatives – Drove organizational security maturity through strategic awareness programs, delivering 32+ executive briefings and training sessions that reduced human-factor security risks by 55% (phishing click rates: 33% to 15%) – Executed strategic technology deployments including advanced email security solutions and threat protection platforms, strengthening organization defense posture – Established proactive threat intelligence capabilities through continuous analysis of emerging cyber threats (ransomware, APTs)
Security Monitoring & Incident Response Lead
sept. 2023 - févr. 2024
6 mois
69340 Francheville, France
– Architected enterprise SIEM infrastructure processing 300GB+ daily data with automated threat-hunting workflows, reducing mean time to detect and response by 40% – Deployed centralized EDR platform achieving 40% reduction in security incidents and 35% decrease in false positives through integrated threat correlation – Established incident response protocols ensuring business continuity during security events and minimizing operational disruption
Deputy CISO
Asendia Management SAS
sept. 2021 - sept. 2023
2 ans 1 mois
Hoyland, Barnsley S74, Royaume-Uni
– Led enterprise cybersecurity program across group operations and subsidiaries, driving security maturity improvements while maintaining regulatory compliance across multiple jurisdictions – Established automated risk management capabilities through comprehensive vulnerability scanning programs, accelerating threat detection and mitigation processes by 15% enterprise-wide – Conducted strategic risk assessments across applications, infrastructure, and third-party partnerships using EBIOS RM methodology, proactively identifying and mitigating critical business risks – Provided executive reporting and stakeholder communications through IT Safety Steering Pack contributions, delivering key security metrics and maturity indicators to senior leadership for informed decision-making – Directed incident response operations ensuring rapid threat containment and business continuity during security events
Security Regional Manager
French Embassy
sept. 2019 - sept. 2021
2 ans 1 mois
Beitbridge, Afrique du Sud
– Managed multi-regional IT and cybersecurity operations across Southern Africa, overseeing information systems, security infrastructure, and budget allocation for regional economic services while ensuring operational efficiency – Led strategic security enhancement initiatives implementing comprehensive cybersecurity measures and protocols across regional economic services, establishing security standards – Conducted diplomatic security assessments performing monthly cybersecurity and IT audit missions for French Embassy network across Southern Africa's
IT Security Engineer
Mutex
sept. 2018 - août 2019
1 an
69340 Francheville, France
– Conducted comprehensive organizational security audits evaluating company processes and managing audit remediation activities to ensure security gaps were properly identified and addressed – Monitored regulatory landscape tracking legal, business, contractual and data privacy requirements to ensure organizational operations remained compliant with changing security standards
IT Security Engineer
Crédit Agricole Titres
sept. 2017 - sept. 2018
1 an 1 mois
69340 Francheville, France
– Contributed to enterprise security strengthening initiative across Crédit Agricole group operations, supporting comprehensive security improvements – Developed KPIs to monitor and measure the effectiveness of security indicators
IT Support Technician
Murex & Metalogic
sept. 2014 - sept. 2017
3 ans 1 mois
69340 Francheville, France
Licences et certifications
OSCP
Délivré le : –
Certified Information Systems Security Professional (CISSP)
Délivré le : –