Main achievements:- I define company security risks and govern them across company departments- I assembled the company cybersecurity organisation (program, team, budget)- I setup a Security Operational Center- I setup a vulnerability management program- I setup a cybersecurity awareness program- I defined and drove the company Schrems 2 business compliance program- I support the business in cybersecurity matters and guide Product and Tech teams in securing designs of new features- I own security budget (x100k€) and manage security vendors- I support Legal teams in GDPR compliance and 3rd party vendor management- I frames security baseline for AI and LLM usageMy responsibilities and efforts are focused on:Governance, Risk and Compliance- Identify company risks, define and lead the Cybersecurity program- Own and define company level security governance and policies- Define and lead the company security compliancy roadmap- Report on cyber security risks and action plan to the JobTeaser executive committeeCybersecurity roadmap and operations- Own and build the security roadmap and strategy- Own cyber budget: choose, manage and negociate with security vendors- Cybersecurity organisation: created, manage and grow the security team- Define and build key cybersecurity processes- Handle security alerts, incidents and vulnerabilities and report on related KPIs- Drive company security with guidelines, process recommendations- Configure and manage cybersecurity tools and key security stacksProduct and data security- Provide product and tech teams with security best practices and support- Define, sponsor and ensure key security features on data management , Identity and access management- Act as a Sales support and customer interface for all security questions- Own and deliver customer documentation for security features and regulatory mattersCybersecurity awareness- Provide security training to the company- Measure security awareness level

Lead a team of 3 security engineers organized in agile mode for Security Detection and Response- Own and manage Security Incident Management: Detection, Response, Post-Mortem, Managed SOC- Own and manage Security vulnerability management: CVE, scans, Bug Bounty Program, Pentest, Audit- Security Reporting KPIs up to Board Level- Security assurance with 3rd party vendor and partners- Design security process engineering- Act as a security incident commander- Identify automation tracks (Sec Dev)Covering the entire Criteo scope: business critical and internal IT Information System, all flavours from On-Premise to SaaS platformsProjects:- SaaS Salesforce CRM application security audit, remediation plan and governance- O365 security audit and remediation plan- Automate security reporting- Contribute to Security RFPs- Contribute to Security Committee- Develop Security Incident Response Plans- Improve vulnerability scanner tooling and vulnerability management process

Product owner of Corporate security services- Manage Security Incident (Detection and Response) and forensics of Criteo Corporate Information System- Manage vulnerabilities (CVE tracking and remediation) of Criteo Corporate Information System- Define and manage Phishing test campaigns- Define and manage the security services catalog - Define roadmap for security services within Criteo Corporate, scope and manage projects within the roadmap- Define Company threat landscapes- Define and manage security governance and process for Criteo Corporate department- Interact with Criteo Internal IT business units and stakeholders- Manage and approve Security design, integration, assessment for Criteo Corporate services and applications- Manage security infrastructure for Criteo Corporate services (protection from cyberthreats and intrusion, proactive detection, secret management): operations, service management, contract establishment or renewal- Define and enforce security policies and best practices- Lead the security squad (4 engineers): Manage backlog, organize priorities and workload - Raise security awareness among tech teams within Criteo Corporate- Report monthly Security KPIsTech stack:- Access control: Cisco ISE, Cisco ASA, Microsoft conditional access- Tenable vulnerability scanner- Microsoft Azure ATP, O365 ATP, AD Identity protection- Cisco Umbrella DNS- Cloud Security (Microsoft Azure, Salesforce)Projects:- Salesforce CRM application security audit and governance- Secret management solution: Azure Keyvault- Develop Incident Response Plans based on managed SOC- Improve vulnerability scanner tooling and vulnerability management process

Manager of a design and build engineering team, Responsible for definition and design of Criteo Corporate network and security services and workplace collaborative services: - Define and manage a roadmap of technical programs (20 programs in 2019) around workspace LAN services, WAN connectivity, Network security and datacenter network (hosting on premises and Microsoft Azure Cloud)o Roadmap definition, follow-up, and quarterly reviewo Budget projection and preparation (1M€ budget spend)o Manage Network Vendors relationshipo Manage Network RFPs and vendor negociationso Team global workloado Provide network engineering design for all corporate business needso Identify, qualify and contribute to business and technical opportunities- Grow, mentor and manage a team of of network and security engineers and project managerso Manage workload and set priorities for operational, build and design work of the teamo Manage team objectives, animate team meeting, o Manage people recruitment, employee (incl. contractors) follow-up, evaluation and development- Act as a technical architect and advisor, oversee the design and operations of my team members - Manage vendors relation and negociation- Escalation point of contact- Lead a technical change committee dedicated to my scope of responsibility- Lead technical workshops- Respect SOX compliancy on a day-to-day basisMajor team projects: - BGP Dynamic routing on Criteo corporate Network- DC Core Network infrastructure evolution- DC Network Interconnection overhaul- New WAN design and operating model (SD-WAN)- New LAN switch solution- Network automation (Ansible AWX)- Next Generation firewall services- Corporate Cloud Video Conferencing service- Wi-Fi quality- Azure Cloud network hosting and security design- Secure network hosting model for branch office Internet Of Things- Fortigate firewalls integration in Azure IaaS Cloud- Cisco ISE NAC platform virtualization and major upgrade (ISE 2.7)

Team lead responsible for Criteo Internal IT corporate communications infrastructure and services: Criteo Network and security office infrastructure and Criteo Internal IT hosting infrastructureGrew and lead a team of 6 network and security engineers- Manage workload and set priorities for operational, build and design work of the team- Act as a technical architect and advisor, oversee the design and operations of my team members - Escalation point of contact- Control all IT changes produced by my team via IT process management- Supervise major network and security IT incident- Defined and lead a technical change committee dedicated to my scope of responsibility- Identify and qualify opportunities, propose solutions and scope projects- Define network and security standards and documentation requirements- Lead technical workshops- Contribute establishing quarterly roadmap- SOX compliancy on a day-to-day basisMajor projects: - Criteo office network and security design standard and versioning- Criteo 802.1X and NAC audit, patch and standardization- Oversee Criteo office move or creation (13 offices in 2015)- Criteo IT DMZ hosting environment overhaul: audit, standardization, migration- Criteo web services proxy: design and integration- IT Criteo Internet logging- Several projects of network segmentation- In-House automation platform (Python)- Azure IaaS Infrastructure network and security POC, design and integration- Cisco ISE Criteo central user authentication system major upgrade- Corporate NTP architecture audit, documentation and- Migration of Criteo IT DC hosting infrastructure interconnection- Corporate WiFi Improvement (coverage and stability)- Vulnerability management: security breach and patch management and technical action plan, security process using Qualys- Standardized Microsoft Infrastructure services filtering policies- Standardized Network and security infrastructure OS versionsEnforce Agile work methodology

Infrastructure Solutions architect and consultant for complex Information system, Telecommunication and web projectsProvide technical infrastructure design and solution for complex projects:- Analyze and evaluate application and project requirements, - Design optimised infrastructure solutions and scenarios, evaluate the projects’ integration in the Orange new generation Datacenter- Help with optimizing the costing of the solution and building its operational management with the productions teams- Deliver the projects’ HLD and LLD documents- Interface and communicate with the project managers, the Orange technical skill centers and production teams, and Orange suppliers- Interface with Orange datacenter hosting infrastructure business owners for validating projects’ solutionRecent projects: Orange home automation platform, Orange Mobile Hadoop Big Data Platform, Orange B2B Wifi solution, Orange Video On Demand Back End Solution, Orange Outlook Corporate mail solution, Orange Rich Communication Service solution, Orange Call and Contact center platformContribute to the evolution of the Orange Group IT infrastructure services’ portfolio

Main responsibilities: Business owner and architect of the Orange Mobile applications IP hosting infrastructure; Technical architect, integrator and coordinator for Orange Mobile applications. Managed the project of redesigning the core IP network function of Orange Mobile applications secured hosting LAN infrastructure - Costed and architected the solution; - Participated to the project presentation in investment committee, - Led the implementation of the solution, supported the production teams, helps with the migrationDesigned the renewal of infrastructure for the Orange Mobile customer’s data synchronization platform and coordinated its integration - Delivered technical solution scenarios and participated to the costing of the project- Delivered technical specifications (system, storage and networking layers) for integrating the solution- Acts as a technical single point of contact and coordinator overall all internal and external technical resources and expertsLed the program for the evolution and transformation of the load balancing (ADC) function for all Orange IS applications; built the migration strategy with the production teams- Audited the architecture and configuration of the current solution- Performed a technical and cost comparative study to select the best technical supplier- Architected the logical solution- Coordinated the implementation, provide support the production team - Built the migration strategy- Acts as a consultant for the network integration of new applications in Orange Internal Information SystemDesign and experiment the Ipv6 integration inside the Orange mobile application secured IP hosting network infrastructureProvide day-to-day delivery of network architecture specifications, provide technical expertise to service and network production teams (level 3 support)

Lead the technical responsibility for a team in charge of operating France Telecom secure IP network access’ and interconnection’s infrastructures and secure shared platforms.• Act as a senior technical advisor for team members, analyse the lastest network security technologies to evaluate and prepare their integration, guide and supervise team members regarding technical processes (ITIL)• Quality: Identify optimisations of processes and tools to operate a network; Analyze possible improvement and evolutions of network infrastructure and architecture; Study network architectural weak points; Technically assist the department transverse capacity management• Cloud computing Program: Provide network expertise on a Proof Of Concept for DC Virtualization; Evaluate the technical design and management of Cloud computing solutions (XaaS); Elaborate the decisive criteria and identify critical points• Designed the network architecture evolution for a mail address book service platform, wrote the specifications and led the corresponding deployment and implementation

• Network site technical manager: guarantees the QoS, ensures the follow-up, monitor the capacity and needs and identify weak points of hosting network infrastructures; Organize, pilot and realize major changes; Write technical and operating specifications; Guide and supervise team members• Deploy, operate, maintain and change secure IP network access infrastructure and services platforms, handle networking troubles (24*7 interventions)• Technical and organizational auditing to improve the quality, security and management of network infrastructures • Major projects: Deployed a shared hosting network infrastructure with virtual environment; Migrated a network site interconnection to the France Telecom backbone

Main speaker for a 2-days class session presenting the IP Network Monitoring theme and practice.• Theoretical part: SNMP, Nagios, Network monitoring role, design and implementation in a company• Practical part: Nagios v3 implementation on a lab network• Exam: Multiple Choices

In charge of technical studies on Information System Security Devices