STEEVE MATELO

– Securing Data, Al and Cloud projects from the design phase, enabling validation of technical architectures before production deployment. – Validating cloud technical architecture choices, reducing risks of non-compliance and security exposure. – Supporting project teams (Cloud Architects, Data Engineers, Product Owners, Al Project Managers) in defining and implementing security requirements, ensuring their effective integration. – Delivering risk analyses, security opinions and waiver requests, facilitating architecture decisions and identification of IS risks. – Integrating cybersecurity into Agile project governance, ensuring systematic consideration of security requirements in Scrum rituals. – Acting as cybersecurity liaison for the Data department, ensuring validation of security milestones and facilitating cybersecurity committees, contributing to secure project deliveries and reducing risks of production blockage. – Continuously monitoring the application of security requirements and conducting audits, identifying gaps to adapt remediation plans accordingly. – Establishing remediation strategies for Data Platform environments, improving overall security level and risk control. – Consolidating a global view of IS risks across the project portfolio, providing management with clear visibility on priority actions.

– Conducted EBIOS RM risk assessments on highly sensitive classified systems, enabling identification of critical scenarios and supporting informed security and architecture decisions. – Scoped and led risk assessment activities with stakeholders, ensuring alignment between security requirements, operational constraints, and project objectives. – Performed security baseline gap analyses and architecture reviews, helping teams identify compliance gaps and prioritize corrective actions. – Evaluated business impacts and defined confidentiality, integrity and availability objectives, supporting risk-based security prioritization across projects. – Built and analyzed risk scenarios, enabling clearer understanding of exposure levels and facilitating decision-making on mitigation strategies. – Produced risk maps and treatment strategies, helping organizations structure remediation plans and improve overall security posture. – Defined security measures and associated treatment plans, contributing to risk reduction and strengthening system resilience. – Delivered risk assessment reports and presented findings to stakeholders, improving risk visibility and supporting executive security governance.

– Assessed the Information System cybersecurity maturity of the foundation, identifying key gaps and enabling the definition of a prioritized security improvement roadmap. – Implemented and monitored security maturity KPIs, improving executive visibility on cyber posture and supporting informed decision-making. – Strengthened the organization's security culture by delivering cybersecurity awareness initiatives and promoting secure user practices. – Organized, planned, and facilitated the Information Security Steering Committee, supporting cybersecurity strategy definition and governance alignment. – Ensured execution and follow-up of the cybersecurity action plan, coordinating stakeholders and tracking remediation progress. – Supported the preparation and execution of a white-box penetration test, enabling identification of critical weaknesses and remediation planning. – Led the remediation of known internal vulnerabilities, reducing attack surface and improving operational security resilience. – Supported network and system infrastructure transformation projects, integrating security requirements and change management across entities. – Coordinated external vendors and service providers, ensuring delivery aligned with security objectives, scope, and timelines. – Evaluated cybersecurity solutions and conducted Proofs of Concept (POC) to support technology selection and investment decisions. – Developed business process mapping, improving visibility of critical workflows and supporting risk analysis and security prioritization. – Built a security monitoring dashboard tracking published CVEs and ransomware mitigation measures, strengthening threat anticipation capabilities. – Conducted a risk assessment using the EBIOS Risk Manager methodology as part of the HOP'EN program, identifying major threat scenarios and defining appropriate treatment measures.