Shanghai, China
From a telecommunication and cybersecurity background, I have been involved in the IoT field for many years now. Acting as consultant or project manager on IoT research and implementation and Security, I am involved in workshops, technology assessments, solution design and implementation, testing and quality management. A good implementation starts from data collection, relies on advanced communication mechanisms, requires intensive data processing and analysis and allows insight and actions to be communicated in time to the required targets. I am actively assessing each of these aspects in a constantly changing ecosystem, keeping in mind the specific requirements of each project. A good analysis without a good communication being useless, I am also able to present challenges, solutions and results to many audiences, with or without technical background.
Head of security (CISO). Responsible for data protection and security related to IT applications, R&D and connected cars. - SOC setup & Operations - Emergency Communication & Crisis Management - Pentests - Disaster Recovery - Compliance to Cyber & Data Protection Regulations - Security Policies & Standards Continuous Upgrade - Risk Management - DevSecOps - Security Strategy with Digital Transformation & Partnerships
Responsible for security compliance, protection, detection, risk analysis and threat research.
Providing Information Security services for Capgemini China, including: - Consulting services - Compliance assessments (ISO 270001, China Cybersecurity Law, GDPR...) - Security Testing (Static analysis, Vulnerabilities assessments, Pentests) - Code/Architecture reviews - Monitoring/SOC - Trainings (to CISOs, managers, technical teams, awareness...) - Cloud security & 3rd Party security management - Automated Cybersecurity with Agile & DevOps - IoT and Cars testing (Supply chain - Embedded - Back-end)
Implementation of test factory and TaaS Security consulting: - Web & mobile app scan - Penetration testing - Security awareness workshops animation - Training
Planning and execution of security and compliance test projects for PV industry solutions. Defining metrics, writing test plan, following test execution, supervising test reporting. Communication with stakeholders. Activities including: Risks analysis Monitoring systems and event detection Event & crisis management Data safety
Preparation of security services in Capgemini China, to provide security audits, penetration testing, attack forensics to Chinese market. - Definition of the services and offers - Experts team building and training plan - Business Development Nessus, Appscan, OWASP-10, whitebox testing, penetration testing Implementation of testing best practices for multiple clients: - Gap analysis - Process improvement - Tools implementation - Pilot projects - Quality control follow-up TPI, TMap, HP-ALM (+SAP, +Sharepoint, +QTP, +Loadrunner), Selenium, JMeter, Jira