Security Project Manager

Cybersecurity Référent within Thales Group Digital Transformation Program

• Program Management
• ◊ Manage all cybersecurity aspects of projects
• ◊ Control and assist integration of security standards
• ◊ Analyse functional and technical needs to recommend adapted solutions (in collaboration with CISO)
• ◊ Ensure awareness to cybersecurity best practices
• ◊ Provide KPIs and reports into steering committee
• Governance
• ◊ Elaboration of Thales Avionics cybersecurity governance memorandums
• ◊ Definition of cybersecurity policies and adaptation of policies to project's context
• ◊ Definition of cybersecurity processes adapted to the engineering environment (On-prem, cloud, hybrid)
• ◊ Creation of procedures and modus operandis to help execution of processes
• ◊ Assessment and selection of security tools
• Risk Management
• ◊ Definition of risk management strategies
• ◊ Performance of Security Risk Assessments
• ◊ Definition of security mitigation measures within Security Actions Plans
• ◊ Following-up of Security Actions Plans
• Compliance
• ◊ Implementation of security measures and protocols
• ◊ Ensure alignment with group cybersecurity best practices
• ◊ Ensure compliance with applicable regulations, standards, policies and guidances
• ◊ Perform compliance gap analysis
• ◊ Assess risks and potential costs of non compliance
• ◊ Prioritize actions to reach an acceptable level of risk

Part of the Business Intelligence Center unit within Sanofi's Global Security Department in charge to support Supply chain, legal department and business units with identification of security threats, evaluation of risks and mitigation of impacts in order to ensure continuity of the company's activities and service deliveries

• Security tasks
• ◊ Due diligences
• ◊ Analyses and risks assessments
• ◊ Cybercrime investigations
• ◊ Activities reporting
• Big Data Program
• ◊ Creation and design of a data processing prototype in order to identify frauds and connections (companies, individuals, and modus operandi)
• ◊ Definition of the data processing model governance (governance and security)
• ◊ Integration of datas into the software IBM I2
• ◊ Interpretation of informations
• ◊ Reporting and presentation of results (risk based approach)
• IT Automation
• ◊ Automation of research process
• ◊ Definition of the data processing model (governance and security)
• ◊ Creation of exploitation procedures and instructions
• ◊ In charge of research process automation used by the team to save time

Part of Application Manager's team for a client - Project Management In charge to implement cybersecurity aspects within activities ◊ Reshaping of the perimeter (procedures creation and resources training) ◊ Management of a software portfolio for the client information system in a Agile environment ◊ Ensure the proper functioning of softwares and release management ◊ Business needs collection to coordinate Software Packaging ◊ Coordination and checking of acceptance tests ◊ Implementation of teledistribution tests into pre-production environment through Landesk or SCCM ◊ Coordination of software deployment ◊ Redaction of reporting for Technical Committee

Part of Capgemini Tools & Industrialization Department that provides solutions to increase performance and productivity of deliveries In charge to implement cybersecurity aspects within activities

• Level 2 infrastructure administrator tasks
• ◊ Application installation into pre-production environment
• ◊ Deployment of softwares into production environment
• ◊ Maintenance and incident assistance of installed softwares
• ◊ Automation of infrastructure administration tasks (scripts shell)
• Project Coordination tasks
• ◊ Reshaping of the service catalog
• ◊ Softwares billing management
• ◊ Business needs and requirements collection + creation of the project charter
• ◊ Release management processes: planning, schedulling, testing and deploying softwares
• ◊ Business needs and requirements collection
• ◊ Software training and project monitoring

Part of Operational Security Department to apply security rules for a client infrastructure

• Project Management
• ◊ In charge of reshaping the perimeter (procedures creation and resources training)
• ◊ In charge of Identity and Access Management (IAM)
• ◊ In charge to analyse flows opening requests
• ◊ In charge of reporting activities for the steering committee and compliance department
• ◊ In charge of client infrastructure software to ensure the proper functioning of the information system, avoid security risks and prevent futures upgrades complication
• ◊ In charge of security anomalies mitigations

◊ Resolution of monitoring incidents ◊ Administration of databases

Part of Key Account and VIP's department (dealing with essentials companies of the French nation as Veolia Environment, Électricité De France, the Prime Minister's office...)

• Project changes management
• ◊ In charge of Data and Voice's incidents
• ◊ Back office processing (monitoring of customers equipments, e-mails management, change management...)
• ◊ In charge of english speaker clients and services

◊ In charge of customers calls ◊ Transmission to technicians ◊ Back office processing (alarm monitoring, e-mails and fax)