Vincent Mallet

Hermès – 4 years IT Architect (1.5 years) As an IT Architect, my main responsibilities included: Supporting projects through the architecture review committee. Acting as a technical and functional reference, with a 360-degree vision of the company's activities. Participating in RFI/RFP processes as an Architect expert. Industrializing action plans following architecture committee decisions. Defining architecture patterns and standards. Security by Design (2.5 years) Team leader of a 5-member analyst team in a complex international environment. My main responsibilities included: Managing the team and ensuring efficient security analysis. Acting as the primary security contact for new projects. Conducting over 200 security risk assessments across various domains (retail, supply, industrial, digital, etc.). Permanent member of key decision-making bodies. Enedis – 6 months Regional CISO for the PACA region, responsible for deploying the group's cybersecurity strategy at a local level. Cybersecurity Consultant – 1 year Worked on multiple security projects, including: Assessing the feasibility of setting up a CyberSOC. Conducting an audit on privileged access management (PAM). Drafting security policies. Implementing firewall audit processes at a corporate level. Performing a risk assessment on the use of Teams and Office 365. Acting as an external CISO for various clients.

- Risk analysis for the homologation of "Système d'Information d'Importance Vitale (SIIV)" - Audit against the new Information Security regulation for companies designated "Opérateurs d'Importance Vitale (OIV)" and define measures to reach the compliancy against this specific regulation - Definition of target architecture answering business needs and the level of security defined in Information Security Policy

AXA Group Security – Implementation of security standard in all AXA entities in the world Presentation and follow up of measures' implementation to reach a fully compliancy against the security standard - Onboarding of entities with 3 workshops describing the context, tools, controls, planning and what is expected by AXA Group Security - Studying of quarterly assessments with the associated remediation plan - Following the respect of plannings - Coordination between AXA Group Security actions and entities actions - Coordination between AXA Group Security actions and AXA IT actions - Preparation for « Business As Usual » model

Implementation of managerial supervision (permanent control) : • Sensitization of permanent control service managers and precisely the managerial supervision control; • Organization and realization of workshop to instantiate managerial supervision control for each service; • Definition of managerial supervision control’s eligibility for each service; • Review of managerial supervision control applicable of GTS activities.

Keys numbers : • 1st GTS Transormation Program in terms of savings ; • 4 initial countries (UK, Channel Islands, Switzerland, Luxembourg) • Extended scope : 4 countries (Spain, Poland, Germany, Italy) Perimeter : RESG/GTS (GHS, TFO, EUS, STP-RAM) ; • Managing the implementation of the new organization in EMEA ; • Definition, qualification of the project and implementation of project governance ; • Realization of meeting supports and the minutes associated; • Realization de of internal governance supports; • Follow up of roadmap, reporting and alert escalation ; • Studying of current GTS activities organization; • Implementation of tools as technical questionnaire and Skills Mapping ; • Definition & validation of the target strategy with the implementation roadmap associated ; • Implementation of the validated strategy.

Project management assistance to implement a Business Impact Analysis tool. • Development and implementation of BIA tool (Macro VBA); • Operational declination for each activity; • Development and implementation of decision support tool concerning the Disaster Recovery Plan strategy.

Assisting the Risk Manager to define and implement a new risk analysis methodology regarding internal/external IT providers who participate in the Steria service offering. • Definition of pilot with the Risk manager and CISO ; • Identification, analysis and mapping of operational risks (legal, environmental, financial, security and safety risks) ; • Proposition of a risk methodology and risks evaluation tool based on MEHARI method; • Definition the associated recommendation plan (legal, security, safety…); • Preparation of methodology deployment for all group providers.

Assistance à maîtrise d’ouvrage pour la mise en œuvre d’une démarche de séparation des SI entre EDF et ERDF liée à la réglementation NOME (projet de migration des contrats au tarif jaune). Chiffres clés : 300.000 contrats à migrer en France, 26 applications (Business Intelligence, métiers, base de données contrats) pour un CA > 3 Milliards d’euros. - Assistance pour la prise en main d’un outil Access permettant l’identification et la qualification des contrats à assainir avant la migration ; - Étude et analyse des spécificités et définition de la criticité des données à migrer vs les risques associés ; - Assistance auprès du chef de projet interne pour l’organisation, la préparation et l’animation des Comités de Pilotage Région de suivi (rédaction de supports, comptes-rendus, reporting…) ; - Assistance pour la définition du lotissement (lot pilote puis déploiement) dans le respect des contraintes opérationnelles, réglementaires et clients ; - Développement d’un outil Access spécifique (Requête SQL, VBA) pour assurer le suivi, le maintien en conditions opérationnelles des contrats spécifiques et reporting auprès de l’équipe MOA transverse (pôle Recette, pôle rédaction des spécifications fonctionnelles, pôle gestion de projet…) - Assistance pour le déploiement de la migration et retour d’expérience associé.

Etude de l’organisation de l’entreprise Conception de la base de données centralisée