Main responsibilities:
ï Company general audit (Finance, Operations & IT)
ï IT Risk & Vulnerability assessment and Controls definition & implementation
ï Pen-testing demonstration & Information security awareness program
ï Information security procedures creation
ï Local market analysis & strategic positioning definition
ï Planning & prioritization of actions with KPI’s implementation
ï Business development: B2B partnership, new products/deals, customers/suppliers’ relationship Mgmt.
Apr 16-Feb 18 NISSAN AUTOMOTIVE EUROPE, Paris, France
Regional IS Process Transformation Project Lead. Main responsibilities:
ï Requirements gathering, Scoping, Planning & Prioritization, Roles & Responsibilities definition
ï End-to-end RFP process Management
ï Liaising with Procurement, Legal & Corporate Nissan Realise 2020 Transformation program teams
ï Change management & communication (Stakeholders meetings/workshops, reporting to Exec board)
ï IT processes Design & Implementation Strategy and Roadmap definition
ï Actions follow-up & Risks monitoring
ï Internal and external staff management (incl. Matrix Organizational structure)
ï Budget monitoring & controlling
ï IS Target Operating Model: OCIO, Info. Security, BRM, EA, SW Factory, Service Delivery & ITS
ï Design & Implementation of IT processes across the region
ï Active support to Corporate Nissan Realise 2020 Transformation program
EMEA IS QAC (Quality Audit and Compliance) Manager. Main responsibilities:
ï Second Line of Defense team creation & development : Recruitments, Onboarding, Training/Coaching
ï Team Management (staff based in 5 locations: FR, NL, UK, SA & IN / 3 continents: EUR, ASIA, AFR)
ï Governance of IS EMEA Audits : ITGC/ITAC, Sarbanes-Oxley (SOX), Statutory & Questionnaires
ï Scope Increase Management : Impact & Risk Analysis. Remediation strategy definition & execution
ï Regional SME in Information Security Audit and Compliance (Infrastructure, Application & Systems)
ï Risk Assessment & Control Matrix definition for in scope Apps., Infra., Processes & Projects
ï Interfacing with internal & external auditors (big four) for regional and local audits (SP, SA, UK, FR…)
ï Deployment of best practices (Policies, Standards, Procedures) in new locations (Africa & Middle-East)
ï Planning & Coordination of IS audits (results, findings, remediations, follow-up & reporting Sr Mgmt.)
ï Regional IS Scorecard production and KPI’s monitoring and reporting to executive board
ï ServiceNow Deployment Project : Procedures & Processes implementation & Compliance validation
ï Core & Non-Core team activities analysis
ï Offshore Outsourcing of mature Non-Core compliance activities to India
ï Budget monitoring & controlling
Main responsibilities:
ï Review & maintenance of ITGC RCM (Risk & Control Matrix)
ï Planning & coordination of controls testing on Security, IT OPS, IS and Projects streams
ï SPOC for Internal / External Auditors (pre-audit, audit & post-audit activities) within EMEA region
ï Self-assessment activities optimization & Internal and External auditors reliance development
ï Follow-up of remediation action plans
ï Consolidation of reports for the executive team
ï Compliance training for IT stakeholders & Business control and application owners
ï Regional SME in Information Security Audit and Compliance (Infrastructure, Application & Systems)
Main responsibilities:
ï Investigation of Information Security incidents
ï Expansion of Information Security best practices thru the region
ï Supervision of suppliers’ adherence to Nissan Information Security policies, standards & procedures
ï Implementation of Information Security processes (e.g. Patching, IAM) across the region
ï Production of Information Security monthly dashboard for Senior Management team
ï Creation or update of Information Security documents (Policies, Standards and Procedures)
ï Management of IT risk database
ï CERT member
ï ITGC/SOX Security Project : Controls definition, implementation and execution (Infra., App. & Sys.)
ï ITGC/SOX Security : Internal & External audits support
ï Pen testing results review
Main responsibilities:
ï Security Dashboard production and communication to the Management team
ï Security consultant role for both IS and Business stakeholders
ï ISO27001 audit planning, support & remediation follow-up
ï Global/local security policies, standards and procedures implementation
ï Notification to CNIL (French DPA : Data Protection Authority)
ï CERT activities coordination
ï Vulnerability Management (QualysGuard, MBSA)
ï Budget monitoring & controlling
ï Projects : - Deployment of WIFI infrastructure (Incl. RFP process : CISCO/AVAYA & their partners)
- Set up of Websense platform to optimize web resources
- Deployment of a CBT Information Security Awareness Program
- DRP formalization & testing
2005-2006 Post-MSc in IS Audit & Security, Lyon University, Lyon, France
Feb-July 2005 Internship at the Network Centre of Jiangxi Province, Nanchang, China
2002-2005 MSc in Networks & Telecommunications Engineering, ENSEA, Paris, France.
Aug 2004 Internship at AXA, Paris, France.
Apr-Jun 2002 Internship at VALEO, Le Mans, France.