France
Cybersecurity executive with 10+ years of experience as Group CISO, leading enterprise security, cyber risk governance, and digital resilience across global organizations (32,000 employees) in pharma, industrial, luxury, and retail sectors. I operate at the intersection of cybersecurity, enterprise risk, and business continuity, ensuring security is embedded as a strategic enabler of growth, regulatory compliance, and operational resilience. My expertise covers hybrid environments (on-prem, Azure, Oracle Cloud) with a strong focus on Zero Trust architecture, identity & access management, and secure-by-design transformation programs. I have deep experience in regulated and complex environments, ensuring alignment with ISO 27001, NIST frameworks, GDPR, LPD, NIS2, DORA and LPM requirements across multi-country organizations. Core leadership areas include: o Cyber Risk & Security Governance at Group level o Incident Response & Crisis Management (executive coordination) o Board-level reporting and executive communication on cyber risk posture o Global security strategy, operating model design, and budget ownership o Security transformation programs across cloud and hybrid infrastructures I work closely with Executive Committees, Boards, Audit & Risk Committees to translate cyber risk into clear business decisions and measurable resilience outcomes. Recognized for leading security organizations through high-impact incident response, regulatory transformation, and enterprise-scale security modernization programs.
• Developed and executed a comprehensive global security strategy for Petroineos Ineos, ensuring compliance with NIS2, GDPR, and PCI-DSS. • Led an European infrastructure team, enhancing the security and availability of IT systems. • Initiated and managed cybersecurity awareness programs, significantly improving the organization's security culture through regular training and assessments.
▸ Designed and managed IT security solutions for data centers and hybrid clouds across Europe, the US, and Russia, coordinating cross-functional IT projects ▸ Conducted security assessments, vulnerability analyses, and risk evaluations, optimizing network and security architectures to enhance system security and address integration challenges
▸ Outsourced network and security infrastructure (IaaS, PaaS) to Swisscom Cloud and managed the Disaster Recovery Plan (DRP) as CSIRT manager ▸ Coordinated audits, penetration tests, and remediation, overseeing the relocation of two data centers to Swisscom
▸ Designed and implemented security and network solutions for trading room data centers, establishing standards, procedures, and security policies ▸ Conducted risk assessments, managed security incidents, and ensured compliance with defined standards and controls