December 22, 2007
Born 5th avril 1974 in Paris (33 years old) 4 rue Kuss
French Nationality - Single F-75013 PARIS
Email email@example.com Cell phone +33 623 667 666
IT Security Expert
CISSP, ISO 27001 Lead Auditor
For more than 6 years, I have been working in IT Security, as a project manager and
consultant. I am familiar with technical aspects as well as security policies, organisational
issues and security governance. I have set up and lead an internal audit team, and conduct
many security audits in different fields. From December 2006, I work on Industrial Control
I have also a solid technical background in system management and IT operations and the
experience of working with quality processes and business priorities in mind.
From EDF, Research & Development.
dcember 2006 Information System Security Expert, with focus on critical infrastructure and industrial control
(1 year) systems.
• Competitive intelligence in Information System Security
• Expert for projects in different business units, for example in automated metering management
• Partnerships (ESRP – European Security Research Programme)
Environnement : Critical infrastructures, industrial control systems, SCADA, European Research Projects
September to Information System Department, Gaz de France.
December Information System Security Consultant for the CISO of Gaz de France Group.
2006 • Support and advice for business units’s CISO and Group’s CISO
(3 months) • Information system security risk management
• Steering of evolutions and technical studies in information system security
Environnement : ISO27001, ISO17799, Risk management
July 2001 to IT Department, EDF-Gaz de France.
August 2006 IT Security Project Manager and Consultant.
(5 years) • As the manager of the security audit team, I have conducted many audits and penetration testing in
France (sites, web applications, subsidiaries)
• Project Manager « VPN over Internet » (remote access through Internet)
• Security Consultant in different fields : mobility, ToIP, site to site, audits, firewall, remote access, ...
• Member of Working Groups on developping security policy (mobility, security incident handling
organisation, laptops and desktops access protection, remote access)
• Member of projects teams « Firewall architecture » and « Personal Firewall»
• Management of trainees ( « Security audit tools», « Linux Firewall»)
Technical environment : LAN, WAN, TCP/IP, QoS, ToIP,VPN, Cisco PIX, Firewall-1, UNIX, NT/2K.
March to IT Department, EDF-Gaz de France.
July 2001 Engineer on the “Data Management” project, in charge of the backup architecture (4 sites, 2500 users).
(5 months) • Conception and realization of the architecture
• Management of the subcontractors deliveries (in charge of solution deployment)
Technical environment : SAN, Fibre Channel, UNIX and NT servers, TCP/IP Network,.
July 1998 to IT Department, EDF-Gaz de France.
march 2001 Network/system engineer responsible for a group of servers in a TCP/IP network.
(+ 2 years ½) • Organisation and leading operation
• Definition and realization of the system/network architecture (including distance-administration)·
• Main role in defining architecture of Gaz de France Accounting Application
• Acting as a quality process leader of the team
Technical environment : TCP/IP Network, NT, Metaframe and Netware servers.
December 22, 2007
August 1997 Military service as scientist in Simulation Research Center of the French Army.
to June 1998 Conception and realisation of a decision-making tool on the impact of a new charge on the units activities.
(10 months) Windows environment, with Microsoft Access and Borland Delphi.
February to Training period at MUREX SA.
June 1998 Conception and realisation of a C++ library
(6h/week) Loading / Saving objects in a database, client / server.
March to End of studies project at MUREX SA.
June 1997 Theoretical study of a mathematical model on interest rates, benchmark of the model on real cases,
(4 months) numerical optimization of the parameters calcul and programmation in UNIX/C environment.
Summer 1996 Training period at the NSM bank (ABN-AMRO group) in the Savings Department.
(2 months) Different works on a Windows database.
Experimentation of mathematics models applied to enhance portfolio management.
Summer 1995 Training period at the Geology Laboratory C.N.R.S. (French National Research, University Paris VI).
(6 weeks) Administration of workstations under UNIX in a TCP/IP network, installation of softwares and hardwares,
help to users, creation of a web site (http://www.lgs.jussieu.fr).
Domains of particular interest
• IT Security (technical, organisational, audit, governance)
• Networks (LAN, WAN, mobility, PAN, M2M)
Operating systems UNIX (AIX, Solaris, HP-UX), Linux, Windows (NT, 2000, XP, Metaframe), Novell
Netware, Mac OS
Networks OSI, TCP/IP, LAN, WAN, SAN, QoS, Cisco IOS, Cisco CatOS
Security Audits and penetration testing (technical, organisational), Security appliances (Cisco
PIX, Catalyst, CheckPoint Firewall-1, Nortel Contivity, Cyberguard, Sygate,
Fortinet, etc.), Open source softwares (nmap, scapy, nikto, BackTrack, etc.)
Languages C, C++, Ada, Java, Fortran, PHP, Perl, Python, HTML
Security CISSP (Certified Information System Security Professionnal, ISC²)
Audits BS7799/ISO27001 Lead Auditor
Management, Governance Project Management, IT Audit, COBIT
Article « Cyber-security approach for smart meters » (Metering International, December 2007)
Speaker on cyber-security for smart meters in Metering Europe Conference (Vienna, Austria, October 2007)
Speaker on IT Security at University of Savoie Conference (Chambéry, France, March 2005)
Article « Free software : administration, support and quality » (internal paper, EDF-GDF, 1999)
Speaker on Internet for first year students (ENSIMAG Grenoble, France, 1997)
Administration of the web server of the ENSIMAG http://www-ensimag.imag.fr (1994-1997)
ISC² (International Information Systems Security Certification Consortium)
ISACA (Information Systems Audit and Control Association)
1997 Graduate Computer Science engineer E.N.S. d'Informatique et de Mathématiques Appliquées de
Grenoble (ENSIMAG, french “Grande Ecole”) with honours. Level equivalent to a Master of Science.
1994 DEUG degree -mathematics and physics- (University Paris VI) with honours
1992-1994 Special preparation courses for french “Grandes Ecoles” (Lycée Fénelon, Paris 6è)
1992 Scientific Baccalauréat -french secondary school diploma- (Lycée Fénelon, Paris 6è)
December 22, 2007
French Mother tongue
English Fluent, trips to UK and USA, daily work in technical English environment
Czech Beginner, learning at the Czech Cultural Center (Paris) for two years, trips to Czech Republic
German School level, trips in Germany
Spanish Beginner, trips to Spain and Cuba
ACTIVITIES AND INTERESTS
First Aid Diploma from the CSU (University Health Center) Grenoble, France from 1997
President 1998-2000 of the Paris local of the AEGEE association whose goal is to promote Europe to young people, to
encourage exchanges through organisation of conferences, cultural meetings. (more info on http://www.aegee.org)
Many trips across Europe : Austria, Belgium, Croatia, Czech Republic, Germany, Hungary, Italy, Netherlands, Poland,
UK, Slovakia, Spain, Switzerland.
Clean driving licence
Inline skating hockey : regional championship in France from 2003, referee