Thierry LOFONG

-Advised SMEs on IT architecture, cloud infrastructure and digital transformation strategies. -Conducted cybersecurity audits and recommended solutions to strengthen compliance, risk management and system resilience. -Engaged as a Subject Matter Expert with global expert networks and providing insights on cybersecurity products and IT strategy.

-Delivered a mobile micro-savings application, driving financial inclusion and user engagement. -Led the strategy for technology platforms, tools, and partnerships to align with business objectives and ensure scalability. -Defined comprehensive functional and technical requirements across Development, Production, and Cybersecurity domains, ensuring robust and secure solutions. -Supervised the development and deployment of all technological services, maintaining high standards for performance and reliability. -Oversaw budgeting and business planning, optimizing resources to meet both technical and financial goals. -Managed operations on AWS, ensuring seamless performance, security, and cost efficiency.

-Deputy Chief Information Security Officer with expertise in Identity and Access Management (IAM), Information Security, Application Security, and Information Continuity. -Provided strategic oversight of IT governance compliance, ensuring adherence to IT security policies and programs. -Oversaw the implementation of measures to guarantee Confidentiality, Integrity, Availability, and Traceability of organizational data. -Led the deployment and monitoring of IT controls across Governance, Development, Production, Security, and Continuity domains. -Directed the deployment and adoption of an IT Risk Management Tool (Archer) to enhance risk assessment and mitigation capabilities. -Conducted comprehensive risk and vulnerability assessments, including the identification, evaluation, and mitigation of risks. -Maintained ownership of the risk register and managed the collection, analysis, and reporting of operational risk incidents. -Contributed to the quantification of business generic risks for regulatory capital allocation (Earnings at Risk, P&L). -Provided audit expertise (internal/external) and ensured the monitoring and execution of action plans. -Delivered detailed reporting to the IT Risk Committee with C-level management, including dashboards, annual reports, KPIs, and KRIs. -Strengthened the LIBOR IT contribution process, enhancing its efficiency and reliability. -Oversaw the implementation of critical security projects, including: Strong authentication mechanisms Encryption solutions,SIEM (Arcsight) deployment,SailPoint implementation for IAM,Intrusion detection systems,CyberArk PAM deployment,EDR solutions,Data Loss Prevention (DLP) initiatives,Penetration testing and vulnerability management,Cybersecurity awareness programs.

-Managed a team of 10 administrators with global coverage across Mauritius, Maldives, Madagascar, Mozambique, and Seychelles. -Supervised Identity and Access Management (IAM), including recertification, reconciliation, and business roles implementation. -Conducted risk assessments for critical applications, including T24 Core Banking and ATM journal systems.

-Conducted comprehensive system and network audits for the data center and provided actionable technical recommendations. -Performed Business Impact Analyses (BIA) to ensure alignment with organizational objectives. -Defined and enforced Recovery Time Objectives (RTO) and Recovery Point Objectives (RPO). -Collaborated with business IT managers through interviews and workshops to align disaster recovery strategies.