About Franck
Highly qualified GRC Expert with years of experience, Franck is a detail-driven professional focused on maximizing security projects’ performance. Through his journey within consulting companies, he gained valuable expertise in people, processes and technologies management. In addition, he is super savvy in designing and implementing security/privacy frameworks and certifications such as ISO, PCI-DSS, NIST CSF, GDPR, CCPA and Public Cloud security.
English
Native or bilingual
French
Native or bilingual
Remote only
Primarily works remotely
Experience
- Financial InstitutionCybersecurity and Risk Management expertBANKING AND INSURANCEJanuary 2022 - Today (4 years and 6 months)Paris, France● Reporting to the CISO and accountable for providing oversight of the GRC task area and ensure effective management, collaboration, and coordination of several key cybersecurity support areas including the following:○ Performing Internal Security Audits (User Access Reviews and compliance with Policies)○ Managing the IT and Cyber security risk register, controls, gaps, remediation and reporting.○ Developed and maintained KPIs/OKRs to measure security maturity and compliance effectiveness○ Leading yearly certifications (ISO 27001/27017/27018/22301, SOC 2) and risk assessment (NIST CSF)○ Collaborating with the Product team to embed security and privacy by design principles, performing threat modeling○ Co-managing the suppliers security program○ Defining the Business Continuity (including BIA) and Disaster Recovery Plans and leading BC and DR drills○ AI Security gap assessment, using ISO 42001 framework○ Insider threat program definition (user risk dashboard, escalation procedures)○ Acted as GRC point of contact for internal and external stakeholders, supporting due diligence and RFPs
- AT&TSecurity architect lead, AT&T R&D centerTELECOMMUNICATIONSNovember 2020 - December 2021 (1 year and 1 month)
- Acted as a cybersecurity focal point across different teams (architects, development team leaders, product managers)
- Developed and rolled out Application security process (SSDLC) aligned with Agile best practices
- Involved in PCI-DSS compliance efforts
- Managed PoC (Proof of Concept) on API security
- Conducting Risk assessment and Threat modeling along the product lifecycle
- DeloitteSecurity project leadDIGITAL AND ITJanuary 2016 - January 2020 (4 years)Acted as trusted advisor (CISO as a Service) to clients in highly regulated industries (pharma, automotive, financial):● NIST-based cloud Security and PCI-DSS gap assessment of an AWS-based marketing and advertising platform● Lead table-top exercise featuring insider threat and malware spreading scenarios● Product risk assessment and threat modeling, highly-regulated IT and OT environments● Security/Privacy gap analysis and remediation plan● Cyber security strategy assessment, IT and OT environments● Designed a Privacy by design roadmap
Recommendations
Be the first to recommend Franck
Help this freelancer shine by sharing your experience working together.
These freelancer profiles also match your criteria
Agatha Frydrych
Backend Java Software Engineer
4.7
(3)
2
Baptiste Duhen
Fullstack developer
4.6
(4)
5
Amed Hamou
Senior Lead Developer
4
(2)
7
Audrey Champion
Web developer
4.3
(3)
4
Education
- Master of Computer Sciences(ESIEA SchoolMaster of Computer Sciences
- CISM (Certified Information Security Manager)CISM (Certified Information Security Manager)