Operational CISO · Paris
I don't inherit security postures — I construct them.
20+ years building and leading security functions across regulated environments — banking, fintech, and international public-sector programs. At Carrefour Banque, I owned the full security function for six years. At Lydia, I built governance lean and fast, without institutional safety nets. Before that: nine years deploying national-scale security programs across three continents.
What I do
End-to-end ISMS design, risk cartography, board reporting (COPIL/CA), KPI/KRI dashboards, and alignment with business objectives.
DORA, RGPD, PCI-DSS, ISO 27001/27005, ACPR, ANSSI, NIS2, LPM. Multi-framework compliance in heavily regulated environments.
Operational CTI integration (Bitsight, SecurityScorecard, MITRE ATT&CK). Shifting from reactive to anticipatory security posture.
Zero Trust architecture (Akamai, Cloudflare). IAM (Okta, Azure AD) and PAM (CyberArk, Wallix) programme delivery.
Full SOC stack — Splunk, QRadar, Sentinel, Elastic, CrowdStrike. Security incident management and crisis coordination.
Security due diligence, PAS (Plan d'Assurance Sécurité), contractual security clauses, and continuous third-party scoring.
Track record
Built the ISMS from scratch in a fast-moving fintech environment. Defined strategic security objectives, implemented KPIs, led DORA & RGPD compliance, and presided over security steering committees.
Full ownership of the security function. Zero Trust architecture, CTI programme, IAM/PAM controls, DORA compliance, board-level reporting. First BIMI/DMARC implementation for a French bank. 4 years of operational use of SecurityScorecard and Bitsight.
SIEM deployment, operational security processes, PAM, cryptographic key management, and KPI dashboards.
National-scale digital identity and security programmes across Costa Rica, Brazil, UK, West Africa, and the USA. ISO 27001 implementation & certification. Security M&A due diligence. Clients: Morpho (IDEMIA), Oberthur Technologies, AG2R La Mondiale.
Formation
École Polytechnique · 2024–2025
Information Security Management
Information Security Risk Management
CNAM Nantes · 1992–1994
Get in touch
Open to CISO and senior security leadership roles — France and international.