Marc Tournier Email & Phone Number

Paris, Ile-De-France, Fr

To quickly reduce the cyber risk, identified as a major one by Eramet, I joined the Group IT Department teams and took responsibility for building and implementing the cyber security defense plan.o Conducting security risk analysis on Information System; defining Digital Security Policies; following internal and partner audits; reviewing security technology architecture; organising awareness-raising actions for all staff on cyber security risks and best practices to follow. o Main achievements to date: Building the team, managing the department budget Implementation of the Cyber-security governance, strategy and tactics. Implementation and supervision of the Security Operations Centre (SOC/CSIRT): - team piloting an outsourced service; - widespread deployment of defense technology (EDR, SIEM,SOAR…), including the Industrial perimeter; - roadmap for the protection plan for non-standard and non-office automation infrastructures Deployment of Office365 solutions for classification, protection and encryption of information Remediation of the main vulnerabilities in the Active Directory; deployment of the PKI Cyber crisis management process; DRP

Paris, Fr

Avril is pursuing major Group transformation: * Implementation of a shared services center for the whole Group * Deployment of related applications and services (HRIS Group, SAP for finance and production, tools and associated interfaces ...) * Digital transformation and new collaborative and communication tools * Global infrastructure deployment (mobility, revised user positions, IaaS hosting, networks, etc.)In this context I manage the Digital Security for the group (CISO). I am in charge of defining the measures to secure processes, applications, infrastructure architectures and tools and overall to protect the Group's Information.I drive all the IS&T on cyber-security topics (integrity, compliance - GDPR, privacy -, availability, crisis management...)I'm involved in each level of the Group's transformation and I define the digital security policy, ensure its compliance and implementation, and ensure that all staff are aware of cyber security risks and good practices to follow. * Conduct cyber security risk analysis * Definition of Digital Security Policies to reduce these risks * Definition of security architectures and technologies * Definition and conduct of awareness-raising actions

Zug, Ch

As the Group’s senior security officer (CISO), I have enterprise-level responsibility for all data/information security policies, standards, evaluations, roles, and corporate awareness. * Overall Group Information Security strategy definition * Security architecture development * Global function oversightIn close cooperation with other executives (Countries IT, Legal, HR, Internal controls, Communication...) I identify, assess, and prioritize risks to Lafarge’s Information Assets anddefines programs and processes to control and mitigate these risks based on appropriate risk management.

Zug, Ch

Managing operations on European Data Center infrastructures.Liaising with the external offshore contractor teams (India), I ensure compliance with the service level agreed with customers. * 20 000 end users from EMEA * 75+ key business applications (finance ERP, Industrial quality controls) * Multiple datarooms, 65+ racks, 800+ servers, 250+ TB of storage * Windows, Linux and HP-UX servers ; Oracle and MS-SQL * An average of 1 000 Tickets per month managed by an offshore team of 60+ engineers

* IT Security Coordinator; Information risk Management; Security Policies and Procedures; Business Continuity and Disaster Recovery Plans; Security awareness program; * Coordination of external IT audits, and follow up with continuous controls; Performing internal IT audits;* Managing the Service Desk team (4 people) to provide optimum IT support to all Corporate and French market end users (200+).* Improving IT Service quality and Service Desk processes (ticketing, incidents, problems, resolution time).* Projects management of new tools, new applications and new systems deployment.* Maintaining the Datacenter (90+ servers), local network and other Infrastructure services (PBx, Visio-conference systems, etc...)* Affiliate Business Continuity Plan and Disaster Recovery Plan* Managing contractors, services and providers contracts and local IT budget.

IT Security Coordinator; Security Policies and Procedures definition based on Information risk evaluation and management; Business Continuity and Disaster Recovery Plans; Security awareness program; Information Management Organization and Method coordination: ITIL processes (security incidents management, problems resolution, change management processes and controls…); Coordination with group O&M on IT audits, controls and best practices; Coordination of external IT audits, and follow up with continuous controls; Performing internal IT audits;Leading projects on Data retention, Security Information and Event Management (SIEM), and various security infrastructure projects (Wide area network security complete re-design, global wireless deployment, antimalware strategy, Windows 7…)

European Security Infrastructure design, Security vigilance. * Management of the European Security Infrastructure plateform (Internet Interconnection, remote accesses, gateways, antispam and antiviruses…)* Building Global VPN SSL remote access service for European, Asian and South American employees (Technical and commercial evaluation, implementation, supervision...)* Global AntiX strategy definition and deployment, preventing all major malware events from 2001 to 2008.* Design and implementation of antispam service, dropping spams to over 90% with no false positive.

Puteaux, Ile De France, Fr

Security Consulting projects management

Nanterre, Île-De-France, Fr

Ivry Sur Seine, Fr

Cissp, Information Security - Cyber-Security

Tsig - Technicien Informatique De Gestion, Networks And Systems

Bts Industries Céréalières + Spécialisation Action Commerciale