Description

Motivé et autonome, j'ai plus de 12 ans d'expérience dans les secteurs public et privé, de la technique à la politique. J'ai occupé divers postes en France, en Thaïlande et à Singapour (R&D, sécurité, analyste, diplomate, responsable de la sécurité de l'information, sûreté économique).

Je travaille actuellement comme conseiller technique à l'OCDE pour aider les pays en développement et les juridictions à concevoir et mettre en œuvre leur système de gestion de la sécurité de l'information afin de garantir la confidentialité des informations financières et fiscales.

Ce poste stimulant me permet de développer et d'accroître mes connaissances sur le paysage mondial de la cybersécurité et me donne l'occasion de travailler dans des environnements culturels variés.

Je propose donc du conseil dans le domaine de la cybersécurité ainsi que des formations et sensibilisation dans la sûreté économique, en français et en anglais.

===================================================================

Motivated and self driven individual with 12+ years experience in public and private sector, from technical to political, I occupied various positions in France, Thailand and Singapore (R&D, Security, Analyst, Diplomat, Chief Information Security Officer).

I am currently working as Technical Advisor at OECD to help developing countries and jurisdictions to design and implement their Information Security Management system to ensure confidentiality while dealing with financial and Tax information.

This challenging position helps me develop and increase my knowledge related to the global cyber security landscape and gives me the opportunity to work with various cultural environments.

Languages

English
Native or bilingual
French
Native or bilingual

Workplace preferences

Can work on-site

Paris (up to 10km), Lille (up to 10km), Chambéry (up to 10km), Lyon (up to 10km)

OECD
Senior advisor - information security management
PUBLIC SECTOR
September 2020 - Today (5 years and 9 months)
Paris, France
Working for the Global Forum on Transparency and Exchange of Information for Tax Purposes (the Global Forum) within the OECD’s Centre for Tax Policy and Administration (CTPA) which is the focal point for the OECD’s work on all taxation issues, both international and domestic.

I aim to provide Technical Assistance and Capacity Building help to Tax administrations from 160 jurisdictions to provide Tax Administrations with:

- Trainings on Information Security Management and guidance on internationally recognized standards (ISO 27000 series)
- The ability to solve technical related issues, Information security design & implementation
- Tools to reach required confidentiality and data safeguards by AEOI (Automated Exchange of Information) and EOIR (Exchange of Information on Request) OECD confidentiality standards
- Maturity level to get assurance when going through their assessment process
- ISMS evaluations based on internationally recognized standards (ISO 27001, ...)

I am also part of the assessment teams in coordination with the Information Security Management experts panel that ensure the OECD requirements for exchanging tax information is properly understood, applied and ISMS follows internationally recognized standards and good practices such as ISO 27001.
ISO 27001 Cybersecurity Cybersécurité Gouvernance Data Protection Officer Risk Management Formation
Société Générale
Deputy global CISO
BANKING AND INSURANCE
October 2019 - October 2020 (1 year)
Paris, France
Deputy Global CISO for SGEF Holding and its 14 subsidiaries in Europe, US, Brazil and China (offices in 20 countries)

Governance
- Participate in the conception of global policies
- Ensure implementation by subsidiaries through local CISOs
- Monitor entities' security maturity levels through KPI / KRI
- Review / document / elaborate SGEF perimeter standards and policies
- Provide expertise and corrective actions

Regulations / Compliance
- Ensure/follow compliance (GDPR,...)
- Advise on risks related to applications / systems / infrastructures

Support
- Provide expertise and support to local CISOs
- Manage level 2 and 3 DLP events

Risk Management
- Assess Risks and Application security
- Advise on new product / technologies POC
- ITRM

Awareness / training
- Raise awareness, provide training
- Monitor PKI and relevant information
- Ensure Technical and security watch

DLP
- Ensure data protection application
- Monitor data leakage

Technologies / frameworks
ISO 2700x, NIST, DLP, Cloud, Classification, Web proxy
cyber security awareness training governance ciso
Ministère de l'Europe et des Affaires étrangères
Second secretary
PUBLIC SECTOR
July 2016 - September 2018 (2 years and 3 months)
Bangkok, Thailand
Political and economical analysis
Safety analysis