Samir HAMOUCH

Governance, Risk, and Compliance : › Leading the GRC program for the group includes governance structures, security policies, and processes aligned with the business objectives of three subsidiaries. › Successfully obtained ISO/IEC 27001:2022 certification for the entire group within six months by coordinating risk analyses, implementing controls, conducting internal audits, preparing for external audits, and managing corrective actions. › Managing the risk lifecycle according to ISO 27005, including maintaining risk registers, developing treatment plans, accepting residual risks, and prioritizing risks based on their impact. › Conducting control assessments and gap analyses according to ISO 27001, NIST CSF, and SOC2, producing remediation roadmaps, and tracking action plans. › Governance of third-party risks and critical suppliers (cloud, SaaS, outsourcing). › Ensuring continuous compliance with ISO 27001, NIST, GDPR, and ISO 9001 through structured documentation, rigorous audit evidence management, and periodic control reviews. Consulting, Communication & Program Leadership : › Advising senior management by translating cyber risks into business language, investment priorities, and strategic recommendations. › Establishing executive and technical reporting, including risk dashboards, performance indicators, awareness materials, and management presentations. › Designing and deploying security architecture and SOC capabilities, contributing to a 30% reduction in security incidents within 12 months. › Coordinating cross-functional teams and vendors to enhance security posture while optimizing budgets and operational efficiency. Infrastructure & cyber defense : › Leading the migration of infrastructures to Microsoft Azure and email services from GCP to Microsoft 365 to modernize the IT environment and improve operational security. › Deploying cybersecurity awareness platforms and data loss prevention solutions to strengthen security culture and information protection. › Migrating the ERP system to a new platform tailored to the company’s context to simplify management processes and improve operational efficiency. › Establishing a SOC supported by a cloud-based SIEM and necessary tools for incident detection, analysis, and response operations. › Successfully implemented and centralized access management using Identity and Access Management (IAM) solutions to streamline identity governance and enhance access control.

Led IT strategy and security operations across multi-site environments (France & Morocco), driving digital transformation and operational excellence. Responsible for infrastructure, security, applications, and cross-border projects. › Advised enterprise clients on developing cybersecurity strategies, conducting IT security audits, performing control assessments, reviewing architecture, and planning remediation efforts. › Guided major accounts through regulatory compliance processes, audit readiness, and security enhancement initiatives in regulated and cross-border environments. › Established trusted relationships with client stakeholders and technology vendors, including Cisco, Check Point, Palo Alto, F5, ESET, Trend Micro, and Microsoft. › Led multidisciplinary teams and managed multiple client engagements simultaneously, focusing on roadmap delivery, vendor negotiations, and budget optimization. › Achieved a 15% cost reduction through enhanced vendor management, prioritization of initiatives, and increased operational efficiency.

Led IT operations and security, ensuring performance, availability, and continuous improvement of the IT ecosystem. Managed teams, infrastructure, and applications with a strong focus on security and compliance. › Managed IT, security, and ISO 9001 compliance operations for three teams comprising a total of 22 staff members. › Oversaw vendor management, infrastructure governance, service continuity, and operational security controls to ensure effective operations. › Led datacenter projects for clients such as Yacast Media and Orange, focusing on secure architecture, hardening measures, and 24/7 monitoring. › Strengthened operational reliability through structured monitoring, process improvements, and compliance-driven management practices.

Supported IT security operations, implemented security policies, and ensured compliance with standards. Worked closely with technical teams to maintain availability and integrity.

Provided cybersecurity consulting and implementation services across infrastructure and network environments. Delivered security solutions and risk management guidance.