Sandrine NGATCHOU
Responsable Intégration Cybersécurité Projets
Salaire / Taux journalier
Paris, France
Freelance
Peut venir sur site
Expertises
Langues
À propos
Introduction
Professionnelle avec plus de 15 ans d'expérience dans l'intégration et l'implémentation de solutions de cybersécurité (SIEM, Vulnerability Gestion de la vulnérabilité, architecture de réseau, PenTest, modélisation des menaces, Cloud, PKI-Cryptographie...) en tant que chef de projet et dans la réalisation d'audits fonctionnels et techniques. Développement de cours, enseignement et conseil sur diverses disciplines de la cybersécurité auprès des salariés d'entreprise.
Expérience de travail
Project Cybersecurity Manager
THALES TRAINING & SIMULATION (ACE) LIMITED
nov. 2023 - Présent
3 ans
95520 Osny, France
- Design of Cyber technical solutions for various projects: Remote maintenance, Cloud (Azure), Securing simulation and training infrastructure, etc. - Risk Management: Identify major security risks and legal and regulatory compliance requirements. - Redaction of the software development security policy - SSDLC - Security Governance: Leading security governance and the Security Champion network committees. - Audit and Compliance: Evaluate the level of security within the organization through periodic audits and ongoing controls. - Reporting: Report regularly to Authority Design on the current level of coverage of information systems security risks. - Leadership and Management: Raise the skills of operational teams in the area of cybersecurity, by providing technical and methodological support.
EDF
nov. 2015 - oct. 2023
8 ans
Seine-Saint-Denis, Île-de-France, France
Cyber solutions integrator - Laboratory CyberSecurity
avr. 2018 - oct. 2023
5 ans 7 mois
Seine-Saint-Denis, Île-de-France, France
- Role in steering bodies (crisis management, operational security committee, etc.). - Drafting security policies for NIS2 compliance Support for the Data Protection Officer to ensure compliance of the personal data processing procedure; consideration of the need for a Data Protection Impact Assessment (DPIA) and its effective completion. - Implementation of information systems security architecture, design, installation, operational planning and risk remediation activities. - Opportunity studies and technical architecture for continuous cyber monitoring of DCS (Digital Control System). - Expert management of security devices, including monitoring, planned changes, patch management and architecture evolution. - Use of threat models and risk assessments to define security requirements for architecture and infrastructure. - Implementation and integration of Cyber solutions: Remote Maintenance, Data-Diode, Identity and Access Management (IAM), Vulnerabilities Scan
Nuclear power plant cybersecurity auditor
nov. 2015 - mars 2018
2 ans 5 mois
08600 Givet, France
- Support operational teams in implementing the French Military Program Law (LPM); - Carrying out risk analysis and defining cybersecurity governance strategies, processes and security policies; - Develop, maintain and explain IT security guidelines; - Controlling the Nuclear power plant's vulnerabilities; - Perform Homologation for LPM compliance. - Manage relations with supervisory authorities (ANSSI - HFDS); - Carry out planned internal controls for the continuous improvement of IT security.
Process Studies Engineer
AREVA NP
mars 2015 - oct. 2015
8 mois
25380 Vaucluse, France
- Optimization of the chemical decontamination loop for the primary exchangers of a Pressurized Water Reactor in order to minimize operator intervention and thus reduce their occupational exposure by integrating the ALARA (As Low As Reasonably Achievable) approach - reducing exposure to ionizing radiation as far as possible. - Keywords: EMMAC-EMMA POA-EMMAg process; Remote control of systems (valves, pumps); RRA/RCV circuit; Radiation protection; Dose Equivalent Flow; Radionuclides
IT Project Manager
EDF DSI COMMERCE Colombes, France
oct. 2010 - oct. 2014
4 ans 1 mois
LA DEFENSE
- Technical qualification of patches and version updates (installation, load tests, non-regression tests, drafting of roadmaps and production releases). - Incident resolution, maintenance management (analysis, incident follow-up, eradication in collaboration with the project support team / editor and subcontractor), performance optimization (java tuning, etc.). - Asset obsolescence management: impact study, costing, planning, deployment. - Participation in related infrastructure projects (OS migration, database, middleware, certificate management): impact study, tests, drafting of roadmaps, - Management of the outsourcing team for migration to the various production and pre-production environments.
Leader Project Manager
AXA
févr. 2010 - oct. 2010
9 mois
92000 Nanterre, France
Projet : Industrialisation de la prévoyance – Outillage des centres de services (GED, CRM, BI, BPMS, SVI/CTI) Missions : Appui au directeur de projet Mesure de la performance par la mise en place de tableaux de bord Définition et diffusion de la démarche projet, du référentiel qualité Etablissement du reporting consolidé Préparation et animation des instances de pilotage Optimisation du plan de charge équipe et arbitrage des priorités projet
CRM-GED / Front Office Project Manager
Mutuelle Bleue
juin 2009 - janv. 2010
8 mois
77000 Melun, France
Projet : Mise en place d’une application CRM / GED au sein de l’entreprise Missions : Rédaction du Request For Information Élaboration des dossiers des marchés, gestion des négociations, participation au choix des prestataires, Rédaction du cahier des charges Animation des réunions de conduite du changement pour adhésion au projet Préparation de la communication autour du projet Animation des ateliers de conception
Functional Application Compliance Consultant
Line Data Services
sept. 2008 - mars 2009
7 mois
92160 Antony, France
Projet : Amélioration de la qualité de l’Application NOEE (Gestion de l'épargne salariale) avant mise en Pré-production et Production par la mise en place du pôle Intégration.
CRM Project Manager
GDF Suez
juil. 2007 - août 2008
1 an 2 mois
Paris la défense
Projet : Mise en place de l’application CRMMS-Selligent dédiée à la gestion de la relation client (Gestion Offres/Multi-offres, Facturation, Acheminement, Distribution, Pricing…) découlant de la mutualisation de 2 applications GRC
Formation
Brandenburgische Technische Universität Cottbus-Senftenberg
Cybersecurity Master, Cybersecurity Strategies - Winter Semester
2020 - 2021
2 ans
ESIEE-IT
Master in Cybersecurity for Connected Industries, Information security / Safety of computer systems
2019 - 2021
3 ans
Aix-Marseille University
Master 2, Process engineering applied to nuclear energy
2014 - 2015
2 ans
Université Paris Dauphine - PSL
Master 2, Telecommunications Management and New Media
2004 - 2005
2 ans
Paris-Sud University (Paris XI)
Master, Electrical engineering and industrial computing
2003 - 2005
3 ans
Licences et certifications
CEH - Certificat Ethical Hacker
Délivré le : juin 2023
Techniques de Hacking et de contre-mesures
Délivré le : juin 2022