Youssef Sagou

Senior IT Risk & Cyber Consultant (ex CISO)

Salaire / Taux journalier

92130 Issy-les-Moulineaux, France

Mobilité : France, Belgique, ...

Freelance

Peut venir sur site

Expertises

CybersécuritéGestion des risquesAudit interneITILConformité réglementaireAmélioration des processusAudit externe

Langues

Français (Maternelle)

À propos

Introduction

15+ years of expertise in cybersecurity, IT risk management, and IT Internal Audit, mainly in the Banking Sector. As a former CISO, successfully implemented NIST-based cyber programs, achieved first PCI-DSS certification for a large bank, and led 20+ security professionals while managing regulatory requirements. Specialized in IT governance, risk assessments, and compliance frameworks to strengthen organization's security posture, including cyber and operational resilience.

Liens

Expérience de travail

BMCI Groupe BNP Paribas

sept. 2019 - Présent

7 ans 2 mois

Deputy Chief Audit Executive - Inspection Générale-

mai 2025 - Présent

1 an 6 mois

Chief Information Security Officer & IT Risk Officer - IT Comex-

sept. 2019 - mai 2025

5 ans 9 mois

Casablanca, Maroc

- Implemented a Group NIST-based Cyber Security Program based on more than 30 initiatives. - Certified the Bank for the first time to PCI-DSS standard. - Closed a Large Program aiming at reducing Cyber Risk exposition of the Bank. - Launched a large Program to keep a high-level of maturity based on Cyber continuous control framework. - Streamlined Cyber Security Organisation by merging 2 entities, as part of a large Transformation Program. -Implemented the Group IT Risk management governance (Steering framework, Operational processes, KRIs) in order to identify, detect and remediate IT Risk in a timely manner. - Top Management regular reporting on Bank’s Cyber Risk Profile. - Acted as main contact towards local Regulators (Central Bank of Morocco, DGSSI). - Management of more than 20 staff experienced in Cyber Security, Cyber Resilience and IT Risk Management.

Senior IT Inspector - Inspection Générale Centrale

BNP Paribas

déc. 2015 - août 2019

3 ans 9 mois

Paris, Genève, Londres, Luxembourg, New York, Honk Kong, Casablanca

Participation in advisory and audit assignments on Group activities and entities worldwide, to assess the efficiency of the processes, the alignment with the Group strategy and the quality of internal controls. Main covered subjects : Cyber Security, IT Risk Management, IT Governance (organisation, strategy, human resources, costs), Enterprise Architecture, Application Development and Maintenance, Application & Production Support. Supervising up to 3 Inspectors. Covered Business lines : Corporate & Institutional Banking, Domestic Markets, International Retail Banking. Locations : Asia, North America, Africa, Europe

Senior IT Consultant/Auditor

EY

août 2010 - déc. 2015

5 ans 5 mois

Paris Area, France

IT Audit : - Managing up to 7 auditors on IT audit engagements, mainly for CAC 40 companies, - Identifying and assessing IT risks with the Business auditors based on a risk-oriented approach (includes ITGCs, ITACs, Journal Entries analysis and specific SOX controls), - Designing a Global audit work program for one of the largest marketing and communications companies in the world in order to ensure data integrity and accuracy. IT Consulting : - Project manager for the Management Testing of a world leading company in the Aluminium sector : Coordination of a worldwide IT testing workplan (10 sites, more than 1400 controls, direct management of 7 consultants), - Project leader as part of an Operational Excellence Program for a major French Public Financial Institution : Design of a 4 year master plan to make substantial savings , - IT Consultant as part of various projects for the French Health National Insurance : Design of a Business Intelligence platform based on Business Objects, Data Quality studies, Development of Data Dictionary used by more than 200 users. - IT Consultant for a large French Public Research Institute : Design a 5-year IT Master plan

IT Risk & Security Analyst - Client Trading & Technology

Societe Generale Corporate and Investment Banking - SGCIB

févr. 2010 - août 2010

7 mois

Paris Area, France

Assistance à Maîtrise d’Ouvrage SI Finance

Air France

janv. 2009 - juil. 2009

7 mois

Paris Area, France


Formation

IAE Paris - Sorbonne Business School

Master of Business Administration - MBA, Administration et gestion des affaires, général

2012 - 2014

3 ans

University of Paris I: Panthéon-Sorbonne

Master of Business Administration (MBA, ex DESS CCAE) en cours du soir

2012 - 2014

3 ans

Université de Technologie de Troyes

Engineer's degree in Information Systems and Telecommunications, Computer Science engineering / IT management

2007 - 2010

4 ans

Lycée Descartes (Rabat)

BAC S


Licences et certifications

COBIT 2019 Foundation

Délivré le : mars 2026

Certifié par ISACA

Cultivate your Inclusive Leadership Mindset

Délivré le : juin 2025

Certifié par Harvard Business Publishing

Talent Leaders For Tomorrow

Délivré le : oct. 2018

Certifié par BNP Paribas

CISA

Délivré le : juin 2017

Certifié par ISACA

SAP Certified Application Associate - Financial Accounting SAP ERP 6.0 EHP5

Délivré le : juin 2013

Certifié par SAP

BS 25999 (ISO 22301) Lead Auditor Business Continuity Management

Délivré le : juil. 2011

Certifié par British Standards Institute

Le meilleur endroit pour trouver votre prochaine opportunité

© 2026. Tous droits réservés.