Ouafia HERMAN

As a Consultant, I have supported multiple companies in the implementation and management of their Information Security Management System (ISMS) in compliance with ISO 27001 or TISAX standards. - Conducting security assessments to evaluate the maturity level of information security, providing recommendations to improve security and compliance. - Performing risk assessments to identify, evaluate, and prioritize threats to the company, and proposed appropriate treatment plans. - Defining security policies and procedures. - Developing security controls and performance indicators to monitor the effectiveness of security measures and ensure continuous improvement. - Training and raising awareness among internal teams on best practices in information security. - Leading ISO 27001 certification initiatives: coordinated internal and external audits, managed non-conformities, and prepared for certification. - Collaborating with key stakeholders (CIO, CISO, operational teams) to ensure alignment of the ISMS with business objectives and regulatory requirements. - Monitoring regulatory and technological changes to continuously adapt cybersecurity practices. As Head of the Key Accounts Department: - Developing ISO 27001 and TISAX support methodologies for key accounts in both French and English. - Managing a team of cybersecurity consultants.

- As part of TPRM (Third-Party Risk Management) team within the IT department, conducting risk assessments of IT projects using third parties. - Ensuring that the risk management activities and controls relating to third parties meet internal requirements and external regulations. With a particular focus on EBA (European Banking Authority) guidelines on outsourcing. - Assesssing risks across multiple domains such as cyber security, data privacy or business continuity including cloud computing risks and controls - Identifying which controls are in place and advising with appropriate controls to mitigate risks to the desired level. - Ongoing monitoring of a portfolio of critical outsourced services throughout the third-party relationship and adapting controls when new issues arise.  - Contributing to improve the TPRM framework.

- Updating annual risk mapping of the company and presenting it to the executive management for better decision-making - Working with each business department to identify, assess, document and regularly review risks. Coaching these department to design and implement controls to mitigate risks. - Defining KRI (Key Risk Indicators) on critical processes to detect and minimise any adverse impacts to the company. - Raising staff awareness of risk management and leading a community of Internal Control representatives to better promote a strong and effective risk and control culture. - Implementing internal controls for processes that impact financial reporting to meet SOX requirements regarding information IT controls. - Developing and maintaining an internal control / audit framework. - Developing a PowerBI dashboard for Senior Management to monitor the first level controls and compliance rates. - Performing IT audits through interviews, testing and controls reperformance on strategic topics and formulating findings and recommendations. - Managing the work of consulting and auditing firms throughout the entire process.

- Managing a Business Intelligence application and supporting multiple teams to use the solution. - Ensuring the running of the applications in compliance with SLA. - Monitoring of corrective and upgrading maintenance in a continuous improvement process according to the PDCA cycle. - Managing projects of the BI experts department (certification projects for new versions of Oracle Essbase and SAP Business Objects) and implementation of a new BI service offer. - Definition of functional and technical specifications. - Monitoring the progress of the project and anticipating constraints in terms of costs, quality and deadlines. - Animation of project steering committees.

Professional experience in Melbourne with a daily practice of English, which helped me become fluent in this language.

- Implementing business intelligence solutions for various customers. - Collecting requirements, writing functional and technical specifications. - Designing and developing ETL processes on Talend to successfully load data into data warehouse from several disparate source systems. - Creating business insights through data visualization solutions.

Skills: Analytical Skills · Information Technology

Inventory of IT equipment