Skills
GRC, Governance Risk and Compliance, ISO 27001, ISO 27002, ISO 27005, NIST CSF, Law 25, Bill 25, GDPR, RGPD, EBIOS Risk Manager, Risk Management, Risk Assessment, Internal Audit, Information Security Governance, Regulatory Compliance, Identity and Access Management, IAM, Incident Management, Vulnerability Management, Security Awareness, Phishing Simulation, Security by Design, Data Privacy, Personal Information Protection, PSSI, SIEM, IBM QRadar, SOC, Security Policies, KPI Reporting, Risk Matrices, Stakeholder Management, Microsoft Excel, Cybersecurity Consulting, ITIL, AWS Cloud, Bilingual French English
About
GRC (Governance, Risk and Compliance) consultant with 7+ years of experience across banking, insurance, energy and consulting, working with private and public organizations. Permanent resident based in Montreal, fully bilingual in French and English.Expert in Quebec's Law 25 (Bill 25) on the protection of personal information, ISO 27001 internal audit, risk management (EBIOS RM), identity and access management (IAM), and incident management within SOC environments.Measurable results: 20% fewer false positives in security detection at Crédit Agricole, a 30% drop in phishing click rates, and a security awareness program scaled from 3 to 52 targeted campaigns per year. Most recently supported AG2R La Mondiale, a major insurance group, on security awareness and GRC governance initiatives.Certifications: ISO 27001 Lead Auditor and Lead Implementer (PECB), EBIOS Risk Manager (ANSSI), CompTIA Security+, AWS Cloud Practitioner, ITIL 4. Currently preparing for the CISA (ISACA) certification.Open to GRC, cybersecurity governance, compliance and Law 25 opportunities in Montreal (hybrid or remote).
Profile Photo
