Heddy D.

Led audit and compliance activities by coordinating ISO 27001 conformity audits and tracking corrective action plans to ensure continuous compliance. Managed the ISMS by coordinating implementation activities following the PDCA cycle, and integrating stakeholder requirements into the system to ensure continuous improvement. Developed and maintained Security Assurance Plans (PAS) by drafting contractual security requirements. Ensured end-to-end security integration in application and infrastructure projects

Conducted NIS 2 gap analyses for multiple clients, assessing their compliance level and identifying corrective actions. Assisted clients in implementing action plans to meet regulatory requirements, ensuring precise compliance tracking. Contributed to the development of cybersecurity governance strategies to align internal practices with directive requirements. Participated in a cybersecurity crisis exercise to assess incident response readiness and improve organizational resilience

In-depth analysis and threat management to strengthen the security of information systems.

Implementation of security policies adapted to customer needs, particularly via the configuration of GPO (Group Policy Objects). Proactive management of false positives and creation of exclusion rules to refine the detection of security incidents. Participated in the implementation of a Security Operations Center (SOC), defining processes, selecting security tools, and supporting deployment.