Theophus Houngbedji

– Role: Cybersecuirté PM, acting like deputly CISO and Security Architect of transversal IT and OT security programs – Defined and validated enterprise security architecture (IT & OT) in line with ISO 27001, NIST, and EBIOS RM frameworks – Conducted risk assessments on projects; identified major risk scenarios and implemented mitigation plans – Worked on iso27001/ NIS2 compliance, including gap analysis, remediation planning, and execution tracking on network infra system scope – Contributed to the development and update of Information Security Policies, hardening guides, and security procedures, integration of cybersecurity standard in project – Prioritized critical vulnerabilities (CVE tracking, Nessus, endpoint security) with infra, DevOps, and system teams – Led infra security transformation projects: SASE (ZTNA, CASB), SD-WAN, XDR / SOC integration, network segmentation, Bastion Wallix, and endpoint protection – Coordinated cloud security initiatives in Azure: network segmentation, IAM, Bastion, and architectural reviews – Contributed security governance and steering committees with IT, security, and project teams – Inventory and classification of Third Party providers and their interdependencies security compliance – Delivered full remediation lifecycle: assessment → planning → execution → reporting Key Achievements: – Contributed iso27001 / NIS2 compliance with a validated remediation roadmap – Implemented Group-wide network segmentation strategy (IT & OT) – Carve-In newly acquired plant into the Cooper Group IT infrastructure – Transformed the Information System security posture: ZTNA, SD-WAN, Bastion, SOC XDR, SIEM deployment – Developed risk-based security dashboards with KPIs for executive reporting

– Design and implement security architectures to protect networks and systems – Manage complex multi-client projects (scoping, qualifying, costing, architectural design of client needs) – Configure and manage cyber and network security equipment such as Firewalls, F5, proxy, cyberark, wallix, Splunk, Firewall, proxy, F5, – Validate flow openings, new solutions or services – Participate in system approval procedures – Evaluate and recommend security solutions adapted to the needs of the organization. – Participate in processing following risk analyzes to identify threats, vulnerabilities and potential impacts. – Carry out vulnerability monitoring and hardening guides – Report on the risk and vulnerability treatment plan (patching, upgrade, etc.) – Ensure the MCO of cybersec and security devices / platform (availability, performance, upgrade, etc.) – Participate in the implementation and management of security monitoring systems (SIEM, IDS/IPS). – Analyze alerts and logs to detect suspicious activities and security violations. – Provide support to the SOC in their investigation activity – Support in PCI-DSS, LPM, iso27001 compliance from infra design perspective for CAGIP – Participate in annual PSI tests (PCA/PRA) and major incident mitigation plan (intrusion, DLP, IDS, Ddos) – Participate with internal and external teams in the investigation of SOC events to minimize impacts – Ensure practices comply with security standards such as ISO/IEC 27001, PCI-DSS, etc – Implement micro segmentation solutions to limit lateral movements in the event of compromise.

– mission1: Senior Security and Network Consultant at GAGIP

– Authored HLD / LLD / Technical Acceptance Documents (DAT) aligned with ISO/IEC 27001 and ANSSI requirements – Led security solution certification and approval (firewalls, WAF, VPNs, security appliances) – Conducted hardening, UAT testing, non-regression validation, and solution qualification prior to production deployment – Contributed to risk assessment activities for the PHOENIX project – Ensured B2B environment compliance with internal security policies and standards – Demonstrated expertise in managing, and monitoring heterogeneous information systems: on-premises, cloud, network, and OT environments Key Achievements: – Validated and approved 50+ critical B2B security devices – Standardized security certification and approval procedures for technical teams – Successfully delivered security solution approvals and non-regression validations

– Mission 1: Senior IP Network Consultant on Phoenix Project at SFR

– deputy ciso acting and security lead for all Security related projects – Deployment, monitoring and troubleshooting of routing and security devices on all IT devices in Buid/RUN and Project (Firewalls UTM,ISE,NAC,Proxy, F5 WAF, EDR Privileged Access Management, Vulnerability scanner agent) – Monitor information systems to detect suspicious activities and security violations – Participate in the analysis of incidents and the implementation of corrective measures. – Contribute to risk assessment by identifying vulnerabilities and potential threats. – Assist in the implementation of measures to mitigate the risks identified. – Assist the CISO in writing and updating security policies and procedures. – Participate in staff training on good security practices and compliance with the PSSI. – Use monitoring and intrusion detection tools (IDS/IPS, antiDdos, WAF, etc.). – Respond to security incidents by following established procedures. – Track and apply security updates and patches to systems and applications. – Maintain an inventory of the CMDB – Assist in the preparation and completion of internal and external security audits. – Follow recommendations from audits to improve security. – Ensure that the organization's systems and procedures comply with relevant regulations (ISO/IEC 27001, PCIDSS) – Reporting and Communication, assist with documentation and reporting required for compliance – Raise staff awareness of security risks and phishing techniques. – Ensure that the principles of least privilege are respected. – Collaborate on various projects aimed at improving the security of information systems. – Propose improvements and innovations in terms of security. – Write and carry out annual PSI tests (PCA/PRA) and major incident mitigation plan (intrusion, dlp, IDS, Ddos) – Carry out OWASP vulnerability risk analyzes and enforce hardening guides, and respond to security and regulatory audits

– Intensive experience on BUILD and RUN, and management role – Field technician supervisor, Provide support for helpdesk support technician for major and/or urgent problems with LAN or any of its components. – Document all troubleshooting and incident management actions via the electronic incident management system in a timely manner. – Coordinate deployment of the technical solution, including internal acceptance testing and delivery of needed documents (Low Level Design Documents) – Review monthly activity, articulate and implement Action Plans relating to identified IT needs. – Have a key role in the quality customer support, in the deployment of services, and report functionally (project organization) to the local operations ICT manager – Responsible for the handover process of the technical infrastructure to operational teams – Perform File Server backups (weekly full backup, daily incremental on file server, and monthly backups of file server and users data). Using Symantec BackupExec, confirm scheduled backup jobs are successful. In conjunction with International IT, perform quarterly data recover validation from backup. – Monitor server logs and perform necessary operations to ensure the proper state of the systems, onsite firewall, managing VPN accounts, Monitor storage Server (Group Policy, NTFS permissions, EFS).

– Intensive experience on IT PROJECT technical aspect and BUILD. – Lead Technical After Sales Support for over 5 countries in Africa where DEVEA have Point of Sale or distribute her products – Provide a professional first point of contact for the Customer. Telephone support and night maintenance Windows activity if required – Diagnose fault-related cases both proactive and reactive by effectively utilizing software diagnostics and other network/products utility program wherever possible – Provide timely and professional technical support for all technical incidents received by phone or through all After Sales Service tools.

– Resolve most of the incidents on all sales products (PC, desktop, printer, inverter, phablet, servers, San systems, switches, routers ...). – Coordinate with all the necessary manufacturer technical departments or vendors to achieve fault resolution within SLA definitions. – Ensure on time resolution, by escalating to the appropriated brand experts and management when necessary. – work mainly on IT PROJECT and BUILD – Install, configure and manage network infrastructure devices (switches, routers, firewalls, wireless controllers and AP's, SSL VPN, WAN compression, etc.) – Do technical design for projects and major changes. Create work breakdown structure and estimate high level effort for individual tasks. Share tasks across the team and lead work items to closure – Maintain and ensure the reliability and performance of LAN, WAN, and VPN components and technologies across our customers – Respond, troubleshoot, identify root cause and remediate issues in a complete, documented and timely manner – Maintain network equipment for worldwide sites. Replace hardware (working with on-site resources), resolve technical issues and manage support with manufacturers and ISPs – Maintain and ensure that backups of all configurations are done on a routine and consistent basis, keep firmware up-to-date. – Ensure that appropriate monitoring, alerting and logging mechanisms are in place and functioning optimally all the time – Create, maintain and ensure the accuracy of all documentation related to network hardware, software, configurations and processes – Ensure compliance and provide evidence as required for regulatory audits (e.g. SOX) – Identify current operational process inefficiencies and provide recommendations for improvement

– Design, configure, and test computer hardware, networking software and operating system software. – Install and upgrade of PC software packages. Provide all relevant technical documentation. – Knowledge of network protocols and other hardware such as printers and scanners. – Ensure that all computers were protected against viruses and updates were applied and installed regularly. – Configure and define parameters for installation or testing of local area network (LAN), hubs, (Cisco)routers, switches, or related networking equipment. – Responsible for network testing, cable and troubleshooting to maintain loop-free network operations. – Experienced in configuring Routing protocols. Designed, implemented, and configured complex switching and routing environments using routers, LAN switches, and VLANs. – Identifies, locates, and resolve network failure and evaluation in order to optimize network performance. – Ability to effectively troubleshoot strong problem solving skills. – Assisted the Sr. System Administrator with answering calls and answers escalated or referred customer representative help desk calls from the staff. – Performed data backups and disaster recovery operations. – Proficient at User and Security Group Active Directory administration for computer accounts, user accounts, distribution lists and security groups in Server 2008 Domain – Experience in troubleshooting user account access issues