Directeur Des Opérations, Risques & Compliance

• Apr 2023 - Present

Cybersecurity Expert Director / Cyber Governance & IT Compliance Offer Leader

• Jun 2019 - Present

Cyber Governance & IT Compliance Offer Leader. Business Unit management with partners Leads response, Missions/Projects/Programs follow up, financial monitoring and missions’ management with various clients. Topics: NIST 800-171a, 800-53r, ISO 27001/27002 maturity review, ISO 27001/27002 precertification audit, ISO 27001/27002 audit, ISMS implementation and review, PSSI creation and PSSI improvements, EBIOS RM risk analysis, technical presentation organization, ISO 19011… Show more Cyber Governance & IT Compliance Offer Leader. Business Unit management with partners Leads response, Missions/Projects/Programs follow up, financial monitoring and missions’ management with various clients. Topics: NIST 800-171a, 800-53r, ISO 27001/27002 maturity review, ISO 27001/27002 precertification audit, ISO 27001/27002 audit, ISMS implementation and review, PSSI creation and PSSI improvements, EBIOS RM risk analysis, technical presentation organization, ISO 19011 organizational audit, security or normative audit. - Cybersecurity & organizational Audit missions director ; - Pre-sales & request for proposal responses; - Consultants / Team management. Show less Cyber Governance & IT Compliance Offer Leader. Business Unit management with partners Leads response, Missions/Projects/Programs follow up, financial monitoring and missions’ management with various clients. Topics: NIST 800-171a, 800-53r, ISO 27001/27002 maturity review, ISO 27001/27002 precertification audit, ISO 27001/27002 audit, ISMS implementation and review, PSSI creation and PSSI improvements, EBIOS RM risk analysis, technical presentation organization, ISO 19011… Show more Cyber Governance & IT Compliance Offer Leader. Business Unit management with partners Leads response, Missions/Projects/Programs follow up, financial monitoring and missions’ management with various clients. Topics: NIST 800-171a, 800-53r, ISO 27001/27002 maturity review, ISO 27001/27002 precertification audit, ISO 27001/27002 audit, ISMS implementation and review, PSSI creation and PSSI improvements, EBIOS RM risk analysis, technical presentation organization, ISO 19011 organizational audit, security or normative audit. - Cybersecurity & organizational Audit missions director ; - Pre-sales & request for proposal responses; - Consultants / Team management. Show less

IT Auditor

• Jan 2015 - May 2019

At Global level, for North America, Europe and Asia, I’m involved in projects and assignments that improve internal processes and performances. The main task is to evaluate the adequacy and effectiveness of the organization’s, IT systems and internal controls against policies and regulations. Findings are reported, tracked and internal controls aligned or increased. Communications with external auditors and government regulations are part of the fieldwork and managed.

IT Compliance Specialist

• Aug 2011 - Dec 2014

On annual bases, I've conducted IT compliance testing initiatives to assess risk, evaluate internal controls, safeguard assets and analyze IT controls supporting financial reporting and operating procedures. Review areas identified for improvement by staff and by self, and, in conjunction with IT Compliance management, develop viable business solutions to mitigate the risk. Main responsibilities were: - Planning, coordinating, and leading IT compliance testing projects;… Show more On annual bases, I've conducted IT compliance testing initiatives to assess risk, evaluate internal controls, safeguard assets and analyze IT controls supporting financial reporting and operating procedures. Review areas identified for improvement by staff and by self, and, in conjunction with IT Compliance management, develop viable business solutions to mitigate the risk. Main responsibilities were: - Planning, coordinating, and leading IT compliance testing projects; - Performing IT compliance testing in accordance with established IT compliance program procedures; - Engaging and consulting with senior business leaders to recommend solutions to improve policies, procedures, efficiency and controls; - Re-testing open identified areas of non-compliance; - Assessing compliance to SOX, GLBA, FFIEC, and PCI requirements.

Quality Auditor, Compliance and Governance

• Jan 2009 - Aug 2011

Consultant / Business Analyst

• Mar 2007 - Jan 2009

Consultant / Business Analyst Assistant

• Oct 2006 - Mar 2007

Consultant / Business Analyst Assistant

• Sep 2006 - Oct 2006

Corporate Controller

• Jun 2005 - Feb 2006