Zemmouri Najlae

Skills: ISO 27001 · Cybersécurité · Gouvernance des risques · Bureau de gestion de projet (PMO) · Gestion de projet agile · Gestion des risques opérationnels · système de management de gestion de la sécurité d'information · Cloud Computing · Analyse de risques

Project 1: Implementation of an ISMS according to ISO 27001 version 2022 Objectives: Establish an Information Security Management System (ISMS) compliant with ISO 27001:2022. Ensure the protection of the organization's information and the management of information security risks. Work details: #preliminary analysis, #project planning, #risk management, #documentation, #awareness and training, #technical implementation, #audit and continuous improvement. Project 2: Implementation of an incident detection system 'ANSSI PDIS Reference' Objectives: Strengthen customers' cyber resilience by implementing an incident detection system compliant with ANSSI references. Job details: #analysis of client needs, #planning and design, #deployment, #training and awareness, #testing and validation, #monitoring and maintenance, Skills developed: In-depth knowledge of content management systems (CMS). Expertise in cybersecurity and risk management according to ISO 27001 and ISO 27005 standards. Skills in project management, strategic planning and compliance management. Ability to work with cybersecurity standards such as ANSSI.

• Development of secure strategies: I led the digital transformation of the company by integrating robust security measures in each phase of the project. My initiatives helped improve data security while meeting operational requirements. • Security project management: I implemented an Information Security Management System (ISMS) compliant with ISO 27001, ensuring the protection of sensitive information and compliance with security regulations. • Risk analysis: Using methodologies such as ISO 27005, I identified and assessed operational risks, developing mitigation strategies to minimize vulnerabilities. • Cross-functional collaboration: I worked closely with IT teams, stakeholders and external partners to ensure a smooth integration of security processes at all levels of the organization. • Training and awareness: I developed security awareness programs for employees, strengthening the security culture within the company. Key Skills: #IT and digital project management (Agile, Waterfall) #cybersecurity and compliance (ISO 27001, ISO 27005) #operational risk management #document management and regulatory compliance #customer relationship management and effective communication

Risk Assessment: Conducting risk analyses to identify vulnerabilities in information systems. Implementing appropriate mitigation measures. Developing Security Policies: Drafting and implementing information security policies and procedures in accordance with ISO 27001 standards. Communicating policies to staff to ensure their understanding and adherence. Awareness and Training: Training employees on best practices in IT security. Organizing workshops and seminars to strengthen the security culture within the organization. Security Incident Management: Monitoring systems to detect potential security incidents. Coordinating incident response, including analyzing and tracking security events. Legal and Regulatory Compliance: Constant monitoring of data protection regulations (e.g. GDPR). Implementing compliance processes to avoid possible sanctions. Audit and Monitoring: Conduct regular audits to assess the effectiveness of security measures implemented. Perform log analyses to detect suspicious behavior or anomalies. Collaboration with Stakeholders: Coordination with IT teams to ensure the integration of security measures into technical projects. Collaboration with legal departments to ensure compliance of data management practices

Skills: Comités · Architecture d’entreprise · Rendu visuel · Indicateurs clés de performance · Génie industriel · Fiabilité · Systèmes de gestion de contenu (CMS) · Technologies de l’information · Diriger des réunions · Ingénierie des processus · Communication écrite · Gestion des risques opérationnels · Surveillance du budget · Optimisation · Partage des connaissances · Communication · Commerce · Réseaux sociaux · Développement de partenariats · Développement de méthodes · Analyse des données · Cartographie · Sécurité de l'information · Coordination de projet · Analyse fonctionnelle · Résolution de problèmes

Project: Setting up a maintenance system Inventory of the 5Ms of maintenance: Workforce: employees, skills, etc. Materials: components used in the development of a product, etc. Materials: means of production, tools, equipment, etc. Methods: techniques, operating modes, procedures, etc. Environment: work environment, etc. Updating/creating technical files on equipment. Classifying equipment according to its criticality: PARETO method, PIEU. Drawing up the action plan: Defining the forms of maintenance to be applied to equipment according to its criticality: AMDEC method Establishing maintenance plans and ranges for critical equipment: curative maintenance, corrective maintenance, predictive maintenance, systematic preventive maintenance and conditional preventive maintenance as appropriate. Optimizing spare parts inventory management: Implementing a new supply policy: MIN-MAX method and developing the dashboard.

Project: Management of finished product stocks Global analysis of the main means of production: analysis of the existing situation, selection of critical positions. Redesign the central warehouse and present the model in Autocad.

Project: Study of a transformer and creation of a computer application that calculates losses using the ACCESS DBMS tool Conclusion: Resolving the problem of losses due to Joule effects in the transformer, which has made it possible to reduce electricity consumption