Sébastien Tauban

Information Security consulting for financial and leisure sectors Analysis of project security documentation to support operational teams; Definition of incident response plans (identification of needs based on risks, identification of capabilities and potential gaps in the structure to respond to incidents, drafting of plans in particular for the identification, containment, eradication and return-to-normal stages); Analysis and assessment of Information Security risks in various contexts, using different methods (COSO, ISO27005, Octave Allegro, etc.); Participation in the definition of security standards; IS audits based on the CIS framework; Analysis and response to phishing incidents reported by customers.

We help organizations secure the integrity of their supply chain through in-depth assessments, backed up by our certified auditors' analysis.

Monitoring of the IT internal control framework ICOFR (ex SOx) for France, Germany, Italy and Corporate entities; set up of control automation and indicators of risks monitoring thanks to tools and databases queries; audit follow-up (internal / external) and managers support during audit missions; Monitoring the monthly reporting for Solvency II data quality; set up of IT risk framework monitoring; identification, follow up and control of essentials and critical providers; preparing the presentation supports for the IT board; coordination of external auditors for regulators request or ISAE3402 certification.

Identification and evaluation of operational risks; implementation and follow up of first and second level of control; audit and recommendations follow up, operational support to design action plans in order to correct the issues highlighted by audit; incidents analysis and writing reports with the proposition of correction plans to limit the risks; preparing the presentation supports and the Internal control report for the Audit Committee. STET is a key structure for banking sector with all complexity that it implies for this kind of structure.

Mission for Consort NT (IT Service company). Implementation of internal control system and its governance on SharePoint (risks cartography and control plan) based on COSO model within Amundi IT Department and within all processes (operations, development and transversal); integration of specific controls within Group Crédit Agricole reporting; preparation of internal control report and presentation supports for Board of IT Department; proposal of action plans on the areas of risk to Board of IT Department; coordination of external auditors in the context of ISAE3402 certification; follow up of audit’s recommendations.

As part of the internal audit team of Eurofactor, participation in different thematic missions (Treasury, IT Systems, etc.) and execution of the audit in the subsidiaries abroad.

Sale of banking products (credit cards, mortgage loans, savings products, insurance products, etc.). Adviser for a portfolio of large public with multiple bank