{"$schema":"https://raw.githubusercontent.com/jsonresume/resume-schema/v1.0.0/schema.json","basics":{"name":"Abdallah B.","label":"Consultant Senior Cybersécurité & GRC","summary":"Senior cybersecurity and GRC consultant with 30 years of IT and infrastructure experience, including 15+ years in leadership roles. Certified ISO 27001 Lead Auditor and Implementer, specialized in SMSI audit, risk analysis, regulatory compliance (ISO 27001, NIS2, DORA, RGPD), and cyber-resilience for large enterprises and mid-market companies.","location":{"city":"Paris, France"},"profiles":[{"network":"LinkedIn","username":"abdallah-baichou","url":"https://linkedin.com/in/abdallah-baichou"}]},"meta":{"canonical":"https://saywise.com/member7173","version":"v1.0.0","lastModified":"2026-10-08T08:51:22.131Z"},"x_saywise":{"handle":"member7173","pronouns":null,"availability":null,"oneLiner":"Senior cybersecurity and GRC consultant with 30 years of IT and infrastructure experience, including 15+ years in leadership roles. Certified ISO 27001 Lead Auditor and Implementer, specialized in SMSI audit, risk analysis, regulatory compliance (ISO 27001, NIS2, DORA, RGPD), and cyber-resilience for large enterprises and mid-market companies.","profileUrl":"https://saywise.com/member7173","markdownUrl":"https://saywise.com/member7173/profile.md","pdfUrl":"https://saywise.com/member7173/resume.pdf","archetype":{"code":"HE-MX","name":"Junction Artisan","url":"https://saywise.com/sca/f3857ef49e93","rarity":"One of the first Junction Artisans on Saywise"}},"work":[{"name":"Cabinet de Conseil","position":"Consultant Senior Cybersécurité & Cyber-Résilience","location":"Ville de Paris, Île-de-France, France","startDate":"2026-01-01","summary":"Leads simultaneous cybersecurity and cyber-resilience projects for large enterprises and mid-market clients, spanning risk analysis, business continuity planning, and crisis management. Delivers structured outputs including security policies, business impact assessments, and recovery strategies. Facilitates steering committees and client workshops while contributing to technical and commercial proposals."},{"name":"Unknown","position":"Senior Cybersecurity & Cyber-Resilience Consultant","location":"Paris","url":"https://currituck.k12.nc.us","startDate":"2026-01-01","summary":"As a senior consultant in a firm specialising in cybersecurity and cyber-resilience, I work autonomously on high value-added consulting assignments for large corporations and mid-sized companies, in the fields of business continuity and cybersecurity. 🔹 Areas of expertise - Business Continuity Plan (BCP) and IT Disaster Recovery Plan (DRP) - Cyber-Resilience Management System — ISO 22301 / ISO 27001 - Cyber risk management — ISO 27005, EBIOS Risk Manager method - Management of IT resilience projects in complex environments 🔹 Main assignments - Leading and delivering several cyber-resilience projects simultaneously, from risk analysis to operational implementation - Producing structured deliverables: BIA, recovery strategies, continuity plans, security policies - Facilitating steering committees and client workshops with a focus on anticipation and structure - Contributing to technical and financial proposals - Actively participating in internal initiatives to develop the service offering and in business development 🔹 Cross-functional skills - Broad culture of risk management and business continuity - Command of ISO 22301, ISO 27001, ISO 27005 and EBIOS RM frameworks - Ability to spot opportunities and develop client relationships - Sharing know-how and mentoring junior consultants"},{"name":"Self-employed","position":"Transition vers la cybersécurité – Formation, certifications & GRC","location":"Paris, Île-de-France, France","startDate":"2024-04-01","endDate":"2025-12-31","summary":"Pursued comprehensive PECB certification pathway (ISO 27001 Lead Auditor, ISO 27005 Risk Manager, ISO 27001 Lead Implementer, ISO 22301 Lead Implementer) to transition 30 years of IT and telecom experience toward cybersecurity and organizational resilience. Built cyber-resilience consulting practice with methodology and deliverables library (BIA, risk mapping, PCA/PRA, dashboards). Deepened expertise in EBIOS RM, crisis management, NIS2, and DORA frameworks."},{"name":"ESN (Grands Comptes)","position":"Responsable du secteur Télécom, Média et Observabilité","location":"Greater Paris Metropolitan Region","startDate":"2021-05-01","endDate":"2024-12-31","summary":"Oversaw critical network infrastructure security audits for major energy and telecom clients including Orange Business, SFR, EDF, and RTE. Managed contract portfolio generating €5M+ annual revenue with 100% SLA compliance. Led team of 35 IT/network professionals with complete P&L responsibility and >95% client satisfaction. Developed observability services using Dynatrace, Netscout, Splunk, and ELK for anomaly detection and performance analysis."},{"name":"Cabinet de Conseil & ESN","position":"Consultant en télécommunications et projets informatiques","location":"Ville de Paris, Île-de-France, France","startDate":"1998-02-01","endDate":"2021-12-31","summary":"Managed strategic contract portfolios and doubled revenue to €7M over five years. Led 50 consultants with full P&L responsibility and overseen service center achieving 100% contractual compliance. Conducted internal SMSI audits (ISO 27001) and provided technical expertise on critical networks. Animated executive committees on network, contractual, and compliance matters for Fortune 500 clients."},{"name":"Telecommunications company","position":"Network Telecommunications Engineer","location":"Île-de-France, France","startDate":"1991-08-01","endDate":"1998-12-31","summary":"• Conception et optimisation d’architectures télécom, participation au déploiement de solutions pour divers clients. • Collaboration avec les équipes techniques et commerciales pour adapter les offres aux besoins des clients. • Veille technologique et proposition d’améliorations pour anticiper les évolutions du marché."}],"education":[{"institution":"Grenoble INP - UGA","studyType":"Diplôme d'ingénieur in Telecommunications","startDate":"1987-01-01","endDate":"1990-06-01"}],"skills":[{"name":"Cybersécurité"},{"name":"ISO 22301 - Lead Implementer"},{"name":"ISO 27005 - Risk Manager"},{"name":"ISO 27001 Lead Auditor"},{"name":"Gouvernance, gestion des risques et conformité (GRC)"},{"name":"ISO 27001"},{"name":"EBIOS Risk Manager"},{"name":"Cybersecurity"},{"name":"Plan de continuité d'activité"},{"name":"Politique de sécurité"},{"name":"Gestion des risques"},{"name":"Audit de sécurité"},{"name":"NIS2"},{"name":"ISO 27001 Lead Implementer"},{"name":"NIST"},{"name":"OCTAVE"},{"name":"MEHARI"},{"name":"CRAMM"},{"name":"RGPD"},{"name":"DORA"},{"name":"CISSP (In Preparation)"},{"name":"IP/MPLS"},{"name":"SD-WAN"},{"name":"VPN"},{"name":"WDM/DWDM"},{"name":"PDH/SDH"},{"name":"Azure"},{"name":"AWS"},{"name":"GCP"},{"name":"SaaS/PaaS/IaaS"},{"name":"Firewall"},{"name":"Cisco"},{"name":"Nokia"},{"name":"Alcatel"},{"name":"Dynatrace"},{"name":"Datadog"},{"name":"Splunk"},{"name":"ELK"},{"name":"Netscout"},{"name":"Riverbed"},{"name":"Nagios"},{"name":"Cacti"},{"name":"Agile"},{"name":"Scrum"},{"name":"SAFe"},{"name":"ITIL V4"},{"name":"GRC Solutions"},{"name":"JIRA"},{"name":"Power BI"},{"name":"Public Procurement"}],"certificates":[{"name":"ISO 27001 Lead Implementer","issuer":"PECB"},{"name":"ISO 22301 Lead Implementer","issuer":"PECB"},{"name":"PECB Trainer","issuer":"PECB"},{"name":"ISC2 Candidate","issuer":"ISC2"},{"name":"EBIOS Risk Manager","date":"2025-12-01","issuer":"Club EBIOS"},{"name":"ISO/IEC 27005:2022 Risk Manager","issuer":"PECB"},{"name":"ISO/IEC 27001 Lead Auditor","issuer":"PECB"},{"name":"Information Security ISMS - ISO/IEC 27001 LEAD AUDITOR","date":"2025-03-01","issuer":"Udemy"},{"name":"ISO 27001:2022-Compliant Cybersecurity: Getting Started","date":"2025-02-01","issuer":"LinkedIn"},{"name":"ISO 27001:2022-Compliant Cybersecurity: The Annex A Controls","date":"2025-02-01","issuer":"LinkedIn"},{"name":"Gérez vos risques cyber avec EBIOS RM","date":"2025-01-01","issuer":"OpenClassrooms"},{"name":"L'essentiel de Jira","date":"2024-12-01","issuer":"LinkedIn"},{"name":"Certificat secnumacademy","date":"2023-11-01","issuer":"ANSSI - Agence nationale de la sécurité des systèmes d'information"},{"name":"Analysez et gérez des risques SI","issuer":"OpenClassrooms"}]}