Sami Chamam

(*) Brightway (several customers) - Cybersecurity Senior Manager - Since July 2016 - Definition of cybersecurity strategy and annual projects - Cyber risk management - ISO 27001 certification project - Management of SOC/CSIRT team (monitoring and incident response) - Lead and perform audit missions: organizational and physical, architecture, configuration - Animation of awareness and/or training sessions - Management of cybersecurity teams (~25 FTE) - Budget management - Leading Steering committees (security, production, third parties, SLA, budget, etc. KPIs) (*) Bouygues Telecom - Cyber ​​Crisis Project Manager - September 2024 to December 2025 Leading the business continuity project following a company-wide cyberattack. Coordinating between cybersecurity teams, operational units, and senior management to restore operational security and improve preparedness for future crises. (*) Bouygues Telecom - GRC Senior Consultant - July 2021 to October 2022 - Writing of security policies - Integration of security in projects - Management of platform securing projects - Management of external regulatory audits (*) Bouygues Telecom - Cyber Security Risk Analyst - September 2018 to July 2021 - Risk, Compliance & Data Privacy Analyst - Information Security Audit Management (*) Airbus Defence & Space - IT Security Risk Analyst - November 2017 to August 2018 - Risk & Compliance Analyst (*) Engie IT on behalf of Thales Services - SOC Vulnerability Manager - April 2017 to January 2018 Operational Leader on Vulnerability Management Service In charge of vulnerability management within Engie IT SOC : - Design and scheduling of vulnerability scans; in prevention mode or as part of an incident response - Administration of the Tenable Security Center solution and Nessus scanners - Planning external scans - Reporting and support for remediation (*) Airbus Defence & Space - IT Security Architect - July 2016 to March 2017 Cyber Security Architect on a carve-out project. In charge of handling all security aspects in seperating both information systems (during the migration) and securing the information system of the future independant entity in respect of Gouvernemental regulations (II901 for France, VS-NfD for Germany, etc.)

BeeRide is a new mode of urban mobility, a real alternative to individual urban transport. It is is the carpooling translated for motorcycles and scooters. The functionning is the same with the both possibilities of traveling immediately or later. This new mode of transport will allow users to share their costs, save time, reduce their carbon footprint and meet friendly people. How it works in 90 seconds? Watch the video below ! Apps are available on GooglePlay and AppStore !

Contributor on the different phases of audit assignments (diagnosis, control, drafting / restitution and recommandations' follow up) based on ISO 27002 and COBIT frameworks and covering the following topics: - IT infrastructures - Information Systems security - Operational Risk Management - IT Production processes - Business Continuity Plan - Permanent Control - Outsourcing (3rd party, SLA, hosting, etc.) - Compliance (Legal, Security policy, Personal information, etc.)

- IT platforms audit : assessment of resilience, DRP, scalability and performance issues, tests and analysis. - IT Security: Design and audit of security architecture, design implementation and management of managed security services (SIEM and IPS) - Project Risk management : Data classification, project risk analysis, security policy and legal compliance analysis Used technologies: * OS: Unix, Windows 2k8 Server, Virtual Server (VMware) * Network: Cisco, Palo Alto equipment * Security: Sourcefire (Cisco) IDS/IPS, McAfee SIEM (ESM, REC, ACE, ELM)

(*) BNP Paribas - IT Configuration Manager - September 2008 to April 2009 - In charge of the management of configuration, compilation, release and versioning of a financial reporting application. - Responsible for qualification and production servers administration (Xserv Servers - Mac OS environment) (*) Orange France Telecom - IT Project Manager - May 2009 to December 2009 In charge of a mobile payment component industrialization and deployment in the Information System of 2 EMEA FT Group affiliates (Orange Niger and Orange Jordan) Used technologies: * OS: RHEL 4 * Application Server: Apache * Specific : Hearbeat and Kannel SMS gateway. (*) NEC - IT Infrastructure Project Manager - January 2010 to April 2010 In charge of integration/testing platform move project: - Physical and logical resources inventory: production of moving sheets, wiring diagrams, cabinet schemas and servers content. - Platform move (to new premises) management (*) RTE - System Administrator - May 2010 to September 2010 In charge of test platform administration (OS, security, software installation and upgrade, releases,...)

(*) SFR - Junior Developer - February 2006 to August 2006 - Development of a statictics application with Perl & PHP. - Tests and validation of the finished product on the customer's site: SSO (Single Sign On) access control solution integrating the "Netegrity" tool of "Computer Associates" for the account of SFR. (*) SFR - IT Infrastructure Administrator and Team Leader - September 2006 to April 2008 - Network administration of Cisco equipements, Perle, Big IP, F5, Alteon, Proxy, Firewalls (PIX)... - System administration of Sun & IBM equipements (servers and workgroup disk storage) with Unix (Solaris 8/9/10), Linux(RHEL), Windows XP/NT/2k/2k3 - Sun cluster - Oracle 9i/10g, MySQL, SQLserver DB - IT Infrastructure team management for 6 months (composed of 8 administrators) (*) SFR - IT Infrastructure Project Manager - April 2008 to August 2008 Lead of a platform migration and software upgrade project (for a marketing solution deployed on the WAP portal of a french mobile operator.) Used technologies: * OS: Unix Solaris 10 * Servers: Sun Solaris * Network: Cisco equipements

Developpement of a Java/JSP/PostgreSQL Web application allowing the consultation of a safe electronic-money server by the subscribed tradesmen.