
Youssef Sagou
Senior IT Risk & Cyber Consultant (ex CISO)
Salaire / Taux journalier
92130 Issy-les-Moulineaux, France
Mobilité : France, Belgique, ...
Freelance
Peut venir sur site
Expertises
Langues
À propos
Introduction
15+ years of expertise in cybersecurity, IT risk management, and IT Internal Audit, mainly in the Banking Sector. As a former CISO, successfully implemented NIST-based cyber programs, achieved first PCI-DSS certification for a large bank, and led 20+ security professionals while managing regulatory requirements. Specialized in IT governance, risk assessments, and compliance frameworks to strengthen organization's security posture, including cyber and operational resilience.
Expérience de travail
BMCI Groupe BNP Paribas
sept. 2019 - Présent
7 ans 2 mois
Deputy Chief Audit Executive - Inspection Générale-
mai 2025 - Présent
1 an 6 mois
Chief Information Security Officer & IT Risk Officer - IT Comex-
sept. 2019 - mai 2025
5 ans 9 mois
Casablanca, Maroc
- Implemented a Group NIST-based Cyber Security Program based on more than 30 initiatives. - Certified the Bank for the first time to PCI-DSS standard. - Closed a Large Program aiming at reducing Cyber Risk exposition of the Bank. - Launched a large Program to keep a high-level of maturity based on Cyber continuous control framework. - Streamlined Cyber Security Organisation by merging 2 entities, as part of a large Transformation Program. -Implemented the Group IT Risk management governance (Steering framework, Operational processes, KRIs) in order to identify, detect and remediate IT Risk in a timely manner. - Top Management regular reporting on Bank’s Cyber Risk Profile. - Acted as main contact towards local Regulators (Central Bank of Morocco, DGSSI). - Management of more than 20 staff experienced in Cyber Security, Cyber Resilience and IT Risk Management.
Senior IT Inspector - Inspection Générale Centrale
BNP Paribas
déc. 2015 - août 2019
3 ans 9 mois
Paris, Genève, Londres, Luxembourg, New York, Honk Kong, Casablanca
Participation in advisory and audit assignments on Group activities and entities worldwide, to assess the efficiency of the processes, the alignment with the Group strategy and the quality of internal controls. Main covered subjects : Cyber Security, IT Risk Management, IT Governance (organisation, strategy, human resources, costs), Enterprise Architecture, Application Development and Maintenance, Application & Production Support. Supervising up to 3 Inspectors. Covered Business lines : Corporate & Institutional Banking, Domestic Markets, International Retail Banking. Locations : Asia, North America, Africa, Europe
Senior IT Consultant/Auditor
EY
août 2010 - déc. 2015
5 ans 5 mois
Paris Area, France
IT Audit : - Managing up to 7 auditors on IT audit engagements, mainly for CAC 40 companies, - Identifying and assessing IT risks with the Business auditors based on a risk-oriented approach (includes ITGCs, ITACs, Journal Entries analysis and specific SOX controls), - Designing a Global audit work program for one of the largest marketing and communications companies in the world in order to ensure data integrity and accuracy. IT Consulting : - Project manager for the Management Testing of a world leading company in the Aluminium sector : Coordination of a worldwide IT testing workplan (10 sites, more than 1400 controls, direct management of 7 consultants), - Project leader as part of an Operational Excellence Program for a major French Public Financial Institution : Design of a 4 year master plan to make substantial savings , - IT Consultant as part of various projects for the French Health National Insurance : Design of a Business Intelligence platform based on Business Objects, Data Quality studies, Development of Data Dictionary used by more than 200 users. - IT Consultant for a large French Public Research Institute : Design a 5-year IT Master plan
IT Risk & Security Analyst - Client Trading & Technology
Societe Generale Corporate and Investment Banking - SGCIB
févr. 2010 - août 2010
7 mois
Paris Area, France
Assistance à Maîtrise d’Ouvrage SI Finance
Air France
janv. 2009 - juil. 2009
7 mois
Paris Area, France
Formation
IAE Paris - Sorbonne Business School
Master of Business Administration - MBA, Administration et gestion des affaires, général
2012 - 2014
3 ans
University of Paris I: Panthéon-Sorbonne
Master of Business Administration (MBA, ex DESS CCAE) en cours du soir
2012 - 2014
3 ans
Université de Technologie de Troyes
Engineer's degree in Information Systems and Telecommunications, Computer Science engineering / IT management
2007 - 2010
4 ans
Lycée Descartes (Rabat)
BAC S
Licences et certifications
COBIT 2019 Foundation
Délivré le : mars 2026
Cultivate your Inclusive Leadership Mindset
Délivré le : juin 2025
Talent Leaders For Tomorrow
Délivré le : oct. 2018
CISA
Délivré le : juin 2017
SAP Certified Application Associate - Financial Accounting SAP ERP 6.0 EHP5
Délivré le : juin 2013
BS 25999 (ISO 22301) Lead Auditor Business Continuity Management
Délivré le : juil. 2011