Stéphane Ongagna

Senior Cybersecurity Manager | ISO 27001

Salary / Daily rate

Lausanne, Switzerland

Freelance

Skills

Consulting CybersecurityGitLabGrafanaSplunkZAPAzureGoogle Cloud PlatformMySQLDockerBurp SuiteConsulting ITGDPRSnortAnsibleConfluenceJira

Languages

English

About me

Intro

CISO with 10+ years securing medical devices, fintech platforms, and Fortune 500 infrastructures across ISO 27001, GDPR, FDA compliance. Led cybersecurity teams managing 180+ subsidiaries and budgets exceeding CHF millions. Specialized in zero-trust architecture, penetration testing, and regulatory compliance for global markets.

Links

Work experience

Software Security and Compliance Manager

SamanTree Medical SAFreelance

Mar 2024 - Present

2 years 8 months

Switzerland · Hybrid

- Implemented the product cybersecurity plan (ISO 81001-5-1 & ISO 62304) and the Integrated. - Management System (ISO 13485 & ISO 27001, ISO 14971). - Ensured compliance with US and EU markets (FDA clearance, HIPAA, GDPR). - Implemented XDR, SOC, SIEM, Vulnerabilities and Code Quality Management. - Performed penetration testing on exposed resources and supervised mitigations. - Participated in requirements and architecture definition for software development tasks related to cybersecurity and data privacy. - Handling IT customers' cybersecurity requirements

Cybersecurity Service Center Lead

TotalEnergiesFreelance

Oct 2024 - Mar 2025

6 months

Paris, France

- Led operational committees of the cybersecurity service center (180+ subsidiaries under management, Lead a team of 4 senior cybersecurity consultants). - Conducted supplier cybersecurity assessments. - Analyzed project risks, recommend and monitor action plans. - Handled SOC, CERT and vulnerabilities incidents, and coordinate relations between SOC, CERT teams and subsidiary Cybersecurity managers. - Raised subsidiaries' awareness and advise on best security practices.

Director Information and Cybersecurity

MindMaze

Nov 2022 - Dec 2023

1 year 2 months

Lausanne, Switzerland

- Spearheaded IT operations, internal and customer IT support, group information security, and product security across Azure, AWS, GCP, and Alibaba Cloud. - Ensured confidentiality, integrity, and availability of organizational information assets, implementing a robust zero-trust strategy. - Established and maintained policies aligned with ISO 27001, NIST CSF, SOC 2, Cybersecurity Trust Alliance, and HITRUST standards. - Ensured compliance of the cybersecurity plan with the Medical Device Regulation (MDR). - Managed security risks for operations and stakeholders, including effective communication and information security awareness programs. - Successfully managed a budget exceeding CHF millions and handled third-party risk management.

CashSentinel

Jan 2019 - Oct 2022

3 years 10 months

Hybrid

Chief Operating Officer

Sep 2021 - Oct 2022

1 year 2 months

Hybrid

- Ensured excellence in financial operations and strengthened synergies with bank partners (Swissquote, BankFrick, BCV, Credit-Suisse, La Banque Postale, La Société Générale). - Designed, planned, and implemented the company's vision, culture, business strategies, objectives, and OKRs. - Implemented the employee stock options plan (ESOP). - Oversaw daily operations and key objectives for business growth (TPV above EUR 200 million) with an annual increase of approximately 100%. - Managed Human Resources, Finance, and administrative concerns. - Served as the guest secretary for the board of directors meetings.

Chief Compliance Officer

Mar 2019 - Oct 2022

3 years 8 months

Hybrid

- Ensured compliance with FINMA, PSD2 RTS, and ACPR requirements. - Established Standard Operating Procedures for Anti-Money Laundering and Countering the Financing of Terrorism. - Established and monitored financial risk assessment and remediation. - Oversaw compliance audits and continuous improvements. - Ensured communication, reporting, and alerting with/to supervisory authorities.

Chief Information Security Officer

Jan 2019 - Oct 2022

3 years 10 months

Hybrid

- Ensured compliance with financial security regulatory requirements and data protection regulations. - Led information security management system based on ISO 27001 and product security. - Orchestrated the risk management program based on ISO 31000. - Implemented an anti-fraud system based on machine learning. - Established and maintained policies for ISO 27001 and PCI-DSS compliance. - Pioneered the creation of a hybrid infrastructure based on Proxmox, containers, and AWS lambda services. - Ensured day-to-day operational security and proactive analysis of threat intelligence.

Data Protection Officer

MindMazeFreelance

Jul 2019 - Jul 2021

2 years 1 month

Lausanne, Switzerland

- Ensured compliance with data protection laws, specifically GDPR, HIPAA.

IT Security and System Administration

TokenestateFreelance

Sep 2019 - Mar 2020

7 months

Région de Genève, Suisse · Remote

- Linux system administration. - AWS infrastructure management.

SyselCloud (par Syselcom Mutuelle Informatique SA)

Nov 2013 - Dec 2018

5 years 2 months

1052 Le Mont-sur-Lausanne, Switzerland

IT security Lead and Project Manager

Jan 2017 - Dec 2018

2 years

1052 Le Mont-sur-Lausanne, Switzerland

- Implemented IT security strategy and presales for customer IT security projects. - Acted as an IT consultant for major accounts. - Led the implementation and continuous improvement of ISO 27001 and ISO 9001. - Conducted technical and organizational security audits. - Served as project manager for migrating infrastructures to Azure and AWS. - Managed data centers and customer cloud infrastructures.

IT Consultant

Jun 2014 - Dec 2016

2 years 7 months

1052 Le Mont-sur-Lausanne, Switzerland

- Managed Microsoft server applications (Microsoft Servers 2008-2016, Exchange, SCCM, Active Directory, Azure, etc.) and Linux servers (Centos, Ubuntu, Debian) and hypervisor management (Hyper-V, OpenStack) - Administrated NetApp storage infrastructures, Cisco, Catalyst network infrastructures, Fortinet, SonicWall, Zyxel, Checkpoint and Sophos firewalls - Led the implementation of a Security Information and Event Management system. - Established a technical security audit and customer training service. - Managed customer IT assets, support, and architecture of secure infrastructures. - Oversaw Firewalls, SOC, IDS, SIEM, and cloud infrastructure provisioning. - Management of customer IT assets (Support 1, 2, and 3) and architecture of secure infrastructures.

IT Security Engineer

Nov 2013 - May 2014

7 months

1052 Le Mont-sur-Lausanne, Switzerland

- Managed Firewalls. - Provisioned and managed cloud infrastructure for customers.

CashSentinel

Apr 2013 - Dec 2016

3 years 9 months

On-site

Head IT security and system administration

Oct 2013 - Dec 2016

3 years 3 months

On-site

- Managed IT and application security in a cloud infrastructure. - Oversaw system administration and business continuity management. - Implemented security policies and brand image protection. - Implemented secure information exchange channels with partner banks.

Network and System Administration

Apr 2013 - Oct 2013

7 months

On-site

- Managed linux systems and network devices (Centos).

Technical Security Auditor

CERN

Nov 2012 - Jan 2013

3 months

Geneva, Switzerland

- Conducted penetration testing of web applications. - Reviewed cybersecurity events.


Education

University of Applied Sciences of Western Switzerland (HEIG-VD)

Bachelor

2010 - 2013

3 years 1 month


Licenses & certifications

CISSP

Issued: Jun 2025

Certified by ISC2

ISO 27001 - Lead Implementer

Issued: Mar 2025

Certified by Certiprof

ITIL Foundation

Issued: Apr 2018

Certified by PeopleCert

Comptia Security+

Issued: Apr 2016

Certified by Comptia

Portfolio

CERT, Vulnérabilités et Risques projet

The best place to find your next move

© 2026. All Rights Reserved.