
Stéphane Ongagna
Senior Cybersecurity Manager | ISO 27001
Salary / Daily rate
Lausanne, Switzerland
Freelance
Skills
Languages
About me
Intro
CISO with 10+ years securing medical devices, fintech platforms, and Fortune 500 infrastructures across ISO 27001, GDPR, FDA compliance. Led cybersecurity teams managing 180+ subsidiaries and budgets exceeding CHF millions. Specialized in zero-trust architecture, penetration testing, and regulatory compliance for global markets.
Work experience
Software Security and Compliance Manager
SamanTree Medical SAFreelance
Mar 2024 - Present
2 years 8 months
Switzerland · Hybrid
- Implemented the product cybersecurity plan (ISO 81001-5-1 & ISO 62304) and the Integrated. - Management System (ISO 13485 & ISO 27001, ISO 14971). - Ensured compliance with US and EU markets (FDA clearance, HIPAA, GDPR). - Implemented XDR, SOC, SIEM, Vulnerabilities and Code Quality Management. - Performed penetration testing on exposed resources and supervised mitigations. - Participated in requirements and architecture definition for software development tasks related to cybersecurity and data privacy. - Handling IT customers' cybersecurity requirements
Cybersecurity Service Center Lead
TotalEnergiesFreelance
Oct 2024 - Mar 2025
6 months
Paris, France
- Led operational committees of the cybersecurity service center (180+ subsidiaries under management, Lead a team of 4 senior cybersecurity consultants). - Conducted supplier cybersecurity assessments. - Analyzed project risks, recommend and monitor action plans. - Handled SOC, CERT and vulnerabilities incidents, and coordinate relations between SOC, CERT teams and subsidiary Cybersecurity managers. - Raised subsidiaries' awareness and advise on best security practices.
Director Information and Cybersecurity
MindMaze
Nov 2022 - Dec 2023
1 year 2 months
Lausanne, Switzerland
- Spearheaded IT operations, internal and customer IT support, group information security, and product security across Azure, AWS, GCP, and Alibaba Cloud. - Ensured confidentiality, integrity, and availability of organizational information assets, implementing a robust zero-trust strategy. - Established and maintained policies aligned with ISO 27001, NIST CSF, SOC 2, Cybersecurity Trust Alliance, and HITRUST standards. - Ensured compliance of the cybersecurity plan with the Medical Device Regulation (MDR). - Managed security risks for operations and stakeholders, including effective communication and information security awareness programs. - Successfully managed a budget exceeding CHF millions and handled third-party risk management.
CashSentinel
Jan 2019 - Oct 2022
3 years 10 months
Hybrid
Chief Operating Officer
Sep 2021 - Oct 2022
1 year 2 months
Hybrid
- Ensured excellence in financial operations and strengthened synergies with bank partners (Swissquote, BankFrick, BCV, Credit-Suisse, La Banque Postale, La Société Générale). - Designed, planned, and implemented the company's vision, culture, business strategies, objectives, and OKRs. - Implemented the employee stock options plan (ESOP). - Oversaw daily operations and key objectives for business growth (TPV above EUR 200 million) with an annual increase of approximately 100%. - Managed Human Resources, Finance, and administrative concerns. - Served as the guest secretary for the board of directors meetings.
Chief Compliance Officer
Mar 2019 - Oct 2022
3 years 8 months
Hybrid
- Ensured compliance with FINMA, PSD2 RTS, and ACPR requirements. - Established Standard Operating Procedures for Anti-Money Laundering and Countering the Financing of Terrorism. - Established and monitored financial risk assessment and remediation. - Oversaw compliance audits and continuous improvements. - Ensured communication, reporting, and alerting with/to supervisory authorities.
Chief Information Security Officer
Jan 2019 - Oct 2022
3 years 10 months
Hybrid
- Ensured compliance with financial security regulatory requirements and data protection regulations. - Led information security management system based on ISO 27001 and product security. - Orchestrated the risk management program based on ISO 31000. - Implemented an anti-fraud system based on machine learning. - Established and maintained policies for ISO 27001 and PCI-DSS compliance. - Pioneered the creation of a hybrid infrastructure based on Proxmox, containers, and AWS lambda services. - Ensured day-to-day operational security and proactive analysis of threat intelligence.
Data Protection Officer
MindMazeFreelance
Jul 2019 - Jul 2021
2 years 1 month
Lausanne, Switzerland
- Ensured compliance with data protection laws, specifically GDPR, HIPAA.
IT Security and System Administration
TokenestateFreelance
Sep 2019 - Mar 2020
7 months
Région de Genève, Suisse · Remote
- Linux system administration. - AWS infrastructure management.
SyselCloud (par Syselcom Mutuelle Informatique SA)
Nov 2013 - Dec 2018
5 years 2 months
1052 Le Mont-sur-Lausanne, Switzerland
IT security Lead and Project Manager
Jan 2017 - Dec 2018
2 years
1052 Le Mont-sur-Lausanne, Switzerland
- Implemented IT security strategy and presales for customer IT security projects. - Acted as an IT consultant for major accounts. - Led the implementation and continuous improvement of ISO 27001 and ISO 9001. - Conducted technical and organizational security audits. - Served as project manager for migrating infrastructures to Azure and AWS. - Managed data centers and customer cloud infrastructures.
IT Consultant
Jun 2014 - Dec 2016
2 years 7 months
1052 Le Mont-sur-Lausanne, Switzerland
- Managed Microsoft server applications (Microsoft Servers 2008-2016, Exchange, SCCM, Active Directory, Azure, etc.) and Linux servers (Centos, Ubuntu, Debian) and hypervisor management (Hyper-V, OpenStack) - Administrated NetApp storage infrastructures, Cisco, Catalyst network infrastructures, Fortinet, SonicWall, Zyxel, Checkpoint and Sophos firewalls - Led the implementation of a Security Information and Event Management system. - Established a technical security audit and customer training service. - Managed customer IT assets, support, and architecture of secure infrastructures. - Oversaw Firewalls, SOC, IDS, SIEM, and cloud infrastructure provisioning. - Management of customer IT assets (Support 1, 2, and 3) and architecture of secure infrastructures.
IT Security Engineer
Nov 2013 - May 2014
7 months
1052 Le Mont-sur-Lausanne, Switzerland
- Managed Firewalls. - Provisioned and managed cloud infrastructure for customers.
CashSentinel
Apr 2013 - Dec 2016
3 years 9 months
On-site
Head IT security and system administration
Oct 2013 - Dec 2016
3 years 3 months
On-site
- Managed IT and application security in a cloud infrastructure. - Oversaw system administration and business continuity management. - Implemented security policies and brand image protection. - Implemented secure information exchange channels with partner banks.
Network and System Administration
Apr 2013 - Oct 2013
7 months
On-site
- Managed linux systems and network devices (Centos).
Technical Security Auditor
CERN
Nov 2012 - Jan 2013
3 months
Geneva, Switzerland
- Conducted penetration testing of web applications. - Reviewed cybersecurity events.
Education
University of Applied Sciences of Western Switzerland (HEIG-VD)
Bachelor
2010 - 2013
3 years 1 month
Licenses & certifications
CISSP
Issued: Jun 2025
ISO 27001 - Lead Implementer
Issued: Mar 2025
ITIL Foundation
Issued: Apr 2018
Comptia Security+
Issued: Apr 2016
Portfolio
