Youssef Ennajimi

– Play a key role in strengthening AXA GO's operational resilience through strategic governance, global coordination, and high-level executive support. – Support directly with the Head of Operational Resilience to lead the delivery of initiatives across Business Continuity Management (BCM), IT Service Continuity Management (ITSCM), and crisis management. – Review and enhance continuity strategies to align with business priorities and regulatory expectations. Conduct Business Impact Analyses (BIA), synthesizing operational needs. – Contribute to the development and testing of Business Continuity Plans (BCPs) and Crisis Management Plans. – Design and maintain executive reporting frameworks to improve visibility, oversight, and decision-making. – Act as the coordination lead across global teams, ensuring strategic alignment and reinforcing AXA's enterprise resilience in a complex and fast-evolving environment.

– Lead and managed the security delivery center of Crédit Agricole Global Infrastructure Platform (CAGIP), managing an 18-person team focused on IAM, Firewalls, Antivirus, and Workplace Security (M365, MDE, S1, Zone Central, Varonis). – Centralized security requests via ServiceNow and ensure timely execution of projects across CAGIP subsidiaries. – Interfaced with the Chief Security Officer to provide real-time reporting, risk forecasts, and project dashboards. – Addressed critical gaps in DLP tool integration, data classification, encryption, and governance.

– Led DORA implementation for Euronext (European stock exchange): roadmap creation, RACI, steering Committee, and reporting. – Directed SWIFT CSP certifications for major banking groups; served as PwC Global Network point of contact. – Conducted IT risk assessments across systems, apps, and infra; produced executive dashboards on KRIs. – Partnered with CISOs to strengthen governance, controls, and compliance across multiple regulated entities.

– Led cybersecurity audits on critical enterprise systems including SAP and Robotic Process Automation (UiPath), focusing on authentication, access control, and data integrity. – Assessed cybersecurity controls aligned with ISO 27001 and internal IT security policies; flagged and remediated high-risk vulnerabilities in system configurations. – Delivered reports and risk dashboards to the Executive Board, supporting strategic decisions on cyber resilience. – Designed IT risk awareness initiatives, boosting first-line engagement with security policies and detection/reporting protocols.

– Performed advanced cyber risk assessments across network infrastructure, Active Directory, and data protection processes with a GDPR lens. – Executed third-party penetration test reviews and data center security audits (physical & logical), recommending actionable improvements for business continuity and asset protection. – Reviewed audits across IT environments including firewalls, antivirus, and identity access provisioning; achieved 100% compliance with external audit requirements.

– Conducted cybersecurity-focused IT General Control (ITGC) and IT Application Control (ITAC) audits for financial institutions, ensuring secure transaction integrity and system reliability. – Reviewed audit logs, password policies, and change management procedures to detect gaps in cybersecurity governance. – Mentored junior staff on IT audit techniques, cybersecurity risk mapping, and data privacy evaluation.