
O M
IT Risk and Service Continuity Manager
Salaire / Taux journalier
Paris, France
Freelance
Peut venir sur site
Expertises
Langues
À propos
Introduction
IT Risk & Cybersecurity expert with 7+ years in enterprise security consulting and operational resilience. Former Capgemini consultant specializing in ISO 27001, NIST frameworks, and business continuity planning for banking sector. Ready to strengthen your security posture with proven ISMS implementation and vulnerability management expertise.
Expérience de travail
Consultant en cybersécurité
Capgemini
juil. 2017 - oct. 2022
5 ans 4 mois
92 · On-site
Missions de conseil dans la gestion du risque cyber Steam Leader - Operational Resilience Define the Bank's various critical processes (BIA - Business Impact Analysis Analysis) Inventory of applications supporting these processes and definition of MOT (Maximum Outage Tolerable) Define the assets to be included in the ORS scope and subject to the controls of the Cyber Security program Define best practices to guarantee application availability Architecture in line with “Resilience by design” principles Definition of capacity planning and capacity monitoring (CPU, RAM, Disk) Monitoring incidents and application SLAs Carrying out backup and restore tests Participation in preparation of BCP (Business Continuity Plan) Define the various DRP use cases Project Manager / Cybersecurity Consultant - ISMS ( ISO 27001 ) Drafting security policies Drafting of security procedures Workshops and validation Production of POCs Drafting of a framework note for the launch of technical projects (EDR, IAM, Awareness, etc.) Cyber security Consultant - NIST Reassessment of controls and safety requirements Improvement of existing controls Gather evidence to validate maturity level Drafting of AMOA sheets for implementation of new controls (2020) Workshops to present the various actions to be implemented Overall project management to meet the various milestones set by the Group Local Correspondent for IT RISK Risk Analysis Security Assurance Plan (Third parties) RGPD compliance for several business projects DPIA Audit Manager (Pentest) - OWASP Drafting of audit terms of reference Meeting with stakeholders to define the scope to be audited Collection of prerequisites prior to penetration testing Draw up documents with the legal department (NDA, audit agreement) Draft and distribute an audit protocol to the department concerned Manage the PASSI provider and plan the audit Follow-up of actions until audit closure Updating of SSI indicators
IA en NTIC
Entreprise de services du numérique
mars 2010 - déc. 2016
6 ans 10 mois
Ile de france
Accompagnement à la transformation digitale des entreprises
Formation
Euridis Business School
Master 2 (M2)
2016 - Présent
10 ans 10 mois
ISC Paris
Master of Business Administration (MBA)
2017 - 2018
1 an 1 mois