Théo Debuire

Cybersecurity Risk & Governance Specialist This role focuses on strengthening the organization’s cybersecurity posture by leading strategic initiatives in risk management, governance, and awareness, while ensuring effective communication across all levels of the enterprise. Key Responsibilities Risk Management : Develop, implement, and oversee a strategic, enterprise-wide information security and IT risk management program. Perform and maintain cyber risk analyses using recognized methodologies to assess threats and vulnerabilities. Track, report, and coordinate the remediation of security risks and control-related issues to ensure proper mitigation. Governance : Contribute to the development, implementation, and maintenance of effective cybersecurity policies and practices. Provide expert guidance to promote and maintain cybersecurity controls aligned with best practices and compliance requirements. Awareness : Design, implement, and manage a company-wide cybersecurity awareness program. Configure and maintain awareness solutions to improve employee knowledge and compliance. Conduct tailored training sessions for diverse audiences, including technical teams and non-technical stakeholders. Additional Responsibilities : Maintain a proactive cybersecurity watch to monitor emerging threats and share relevant insights with the cybersecurity team. Communicate effectively with stakeholders across all organizational levels to foster a culture of security and maturity.

System and IT security specialist for BONDUELLE As a cybersecurity consultant at iParcus, I supported Bonduelle in implementing and improving their cybersecurity and IT governance strategy. My role covered both strategic (compliance and governance) and operational aspects (incident management, securing infrastructures, Continuous Threat Exposure Management (CTEM)). IT Governance & Compliance - ISO 27005 & ISO 27001 certified: Application of best practices in risk management and compliance. - Deployment of a Business Continuity Emergency Plan (PUPA) to ensure resilience in the face of cyber threats. - Implementation of a Business Impact Analysis (BIA) to identify and prioritize critical assets. Operational Safety & Risk Management - Management of awareness campaigns with proofpoint and creation of KRIs for follow-up in committees. - Securing messaging with EMS/TAP Proofpoint: Protection against phishing and malware. - Configuration of SPF/DMARC on key domains to reinforce brand security and gain trust with various customers. - Analysis and response to security incidents via SentinelOne, AWS GuardDuty and Zscaler. - Improved alerting via SentinelOne and Zscaler. - Implementation of Proxy/Firewall security with Zscaler for secure access control, replacing proofpoint. - BitSight referent: Improved detection of external vulnerabilities and coordination of remediation plans to increase external scoring for Bonduelle brands. - Rapid7 referent: Deployment of several vulnerability scanning scenarios with Rapid7 for proactive threat detection in coordination with network and system teams. - Correction of detected vulnerabilities (Bitsight, Rapid7) and continuous improvement of security posture.

Security Operations Specialist (SecOps) This role focuses on managing security incidents, overseeing key cybersecurity initiatives, and ensuring continuous improvement through automation and collaboration. Key Responsibilities Incident & Alert Management : Manage and respond to security incidents and alerts in collaboration with the SecOps team. Ensure timely detection, prioritization, and resolution of security issues. Testing & Audits : Lead penetration tests, vulnerability scans, and code audits using the RACI method. Configure automated vulnerability scans with HTTPCS for proactive risk management. Set up and maintain code audit workflows with CheckMarx to ensure secure development practices. Cybersecurity Monitoring : Conduct continuous cybersecurity monitoring and stay informed on the latest threats and trends. Share key findings from cybersecurity watch activities with the security teams to improve defenses. Key Tools : HTTPCS: Automated vulnerability scanning. CheckMarx: Secure code auditing.

🖥️ System & Security Administrator This role combines system administration, security management, and user support to ensure a secure and efficient IT environment. 🎯 Key Responsibilities ⚙️ Maintenance and Project Management 🔒 Manage and maintain security solutions, including: TrendMicro: ApexOne, Worry-Free Business Security Services, CloudAppSecurity, EmailSecurity. Office 365: Organization setup, user/shared mailboxes, distribution lists, and more. VeeamBackup & Replication: Backup and disaster recovery. Windows Server: Active Directory (AD), Group Policies (GPO), Distributed File System (DFS), WSUS, Certificate Authority (CA). SCCM: Package deployments and updates. 🛠️ User Support : 📧 Provide support for Office 365 issues. 🔗 Assist with VPN configuration and troubleshooting. 🧑‍🏫 Deliver training and guidance to users on IT tools and security best practices. 🛠️ Resolve tickets across all levels (N1, N2, N3). 🌍 Professional Impact : This position ensures business continuity and user satisfaction by maintaining robust systems, implementing security solutions, and fostering IT literacy within the organization.

- Résolution d'incidents Windows Serveur - Mise en place de Graylog - VMware vSphere 5.1, 5.5, 6, 6.5 • Gestion des alertes • vMotion • Création/Extension/Suppression des datastores • Modification des VMs (Ajout CPU, RAM, Disques) - Windows Server 2003, 2008, 2008 R2, 2012, 2012R2, 2016 • Active Directory, GPO… • Analyse de log et rapport des erreurs • Extension/Création de disques - Citrix 7.7 • Résolution d’incidents niveau 1 • Mise à jour des serveurs de présentations • Publication d’applications

• Mise en place d’une infrastructure réseau avec Virtual box et VMWare • Création de serveur virtualisé Linux : Apache(Web), Squid(Proxy), Ha Proxy et Nginx (Load Balancing), IpFire et Pfsense(pare-feu), EyesOfNetwork(Supervision) et Windows Server 2012 R2 et 2016 (AD, DHCP, DNS, DFS, Sauvegarde, IIS, GPO)

• Mise en place d’une infrastructure réseau avec Virtual box et VMWare • Création de serveur virtualisé Linux : Apache(Web), Squid(Proxy), Ha Proxy et Nginx (Load Balancing), IpFire et Pfsense(pare-feu), EyesOfNetwork(Supervision) et Windows Server 2012 R2 et 2016 (AD, DHCP, DNS, DFS, Sauvegarde, IIS, GPO)

Changement du parc d'imprimante (Lexmark) de chez Roquette en tant que intérimaire chez Rio service. Environ 300 imprimantes à changer. Vérifier la configuration des nouvelles imprimantes + tester les impressions.

Configuration d'un serveur Windows 2012R2 + ajout de quelques rôles et fonctionnalités (Active directory, IIS, DHCP). Maintenance et configuration d'ordinateur. Installation d'antivirus, logiciel bureautique. Configuration d'ordinateur et d'imprimante. Installation des postes, imprimantes et onduleurs.

Maintenance d'ordinateurs et imprimantes.