Theophus HOUNGBEDJI

Role: Deputy CISO and Security Architect Lead end-to-end cybersecurity projects (scoping, design, deployment, and production rollout) Design and validation of the new enterprise security architecture (IT and OT) in accordance with ISO 27001, NIST, and EBIOS RM frameworks Conducting risk assessments on projects; identifying key risk scenarios and implementing mitigation plans (monitoring CVEs, Nessus, endpoint security) with the Operational teams.. Managing the complete lifecycle of remediation measures: assessment → planning → execution → reporting. Working on compliance with ISO 27001/NIS2 standards, including gap analysis, corrective action planning, and monitoring their implementation at the network infrastructure level. Contributing to the development and updating of information security policies, hardening guides and security procedures, security assurance plans, partner evaluations, and the integration of cybersecurity standards into the project. Coordinate internal teams (Information Security, IT, Network, Operations) and technical partners: SASE,ZTNA,SD-WAN,XDR/SOC,network segmentation,Wallix Bastion and endpoint protection. and cloud security initiatives on Azure: network segmentation, IAM, Bastion, and architecture reviews. Participating in security governance and steering committees with IT, security, and project teams. Evaluating third parties and Security Assurance Plans. Raise awareness among teams about cybersecurity challenges and best practices Key achievements: - Contribute to the implementation of the security, governance and cybersecurity framework in accordance with ISO 27001/NIS2 requirements - Implemented a Group-wide network segmentation strategy (IT and OT) - completed 3 plants Carve-in into the Cooper Group's IT infrastructure - Transformed information systems security: deployed ZTNA, SD-WAN, Bastion, SOC XDR, and SIEM - Developed risk-based security dashboards with key performance indicators (KPIs) for COPIL reporting

- Design and implement security architectures to protect networks and systems. - Manage complex, multi-client projects (scope definition, qualification, cost estimation, architectural design to meet client needs) using Fortinet, Cisco, and F5 firewalls, proxies, CyberArk, Wallix, etc. - Write and analyze Technical Architecture Documents (TADs) (High-Level Design, Low-Level Design, Flow Matrix). - Integrate security into IT projects (Security by Design). - Evaluate and recommend security solutions tailored to the organization's needs. - Participate in risk analysis to identify threats, vulnerabilities, and their potential impacts. - Implement vulnerability monitoring and security hardening guidelines. - Report on the risk and vulnerability mitigation plan (patches, upgrades, etc.). - Ensure the continuous maintenance, availability, and operation (CMO) of cybersecurity devices and platforms (availability, performance, upgrades, etc.). - Contribute to remediation efforts within PCI-DSS, LPM, and ISO 27001/NIS2 regulated perimeters from an infrastructure perspective for CAGIP. - Participate in annual security assessments (PSI) and the major scenario management plan (intrusion, DLP, IDS, DDoS). - Collaborate with internal and external teams on SOC incident investigations to minimize their impact. - Monitor threats, OWASP vulnerabilities, and configuration reviews.

mission1: Senior Security and Network Consultant at GAGIP

Authored HLD / LLD / Technical Acceptance Documents (DAT) aligned with ISO/IEC 27001 and ANSSI requirements Led security solution certification and approval (firewalls, WAF, VPNs, security appliances) Conducted hardening, UAT testing, non-regression validation, and solution qualification prior to production deployment Contributed to risk assessment activities for the PHOENIX project Ensured B2B environment compliance with internal security policies and standards Demonstrated expertise in managing, and monitoring heterogeneous information systems: on-premises, cloud, network, and OT environments Key Achievements: -Validated and approved 50+ critical B2B security devices -Standardized security certification and approval procedures for technical teams -Successfully delivered security solution approvals and non-regression validations

Mission 1: Senior IP Network Consultant on Phoenix Project at SFR

• Technical lead and Ciso Deputy acting for all cybersecurity related projects • Deployment, monitoring and troubleshooting of routing and security devices on all IT devices in Buid/RUN and Project (Firewalls UTM,ISE,NAC,Proxy,F5 WAF,EDR Privileged Access Management,Vulnerability scanner agent) • Monitor information systems to detect suspicious activities and security violations • Participate in the analysis of incidents and the implementation of corrective measures. • Contribute to risk assessment by identifying vulnerabilities and potential threats. • Assist in the implementation of measures to mitigate the risks identified. • Assist the CISO in writing and updating security policies and procedures. • Participate in staff training on good security practices and compliance with the PSSI. • Use monitoring and intrusion detection tools (IDS/IPS, antiDdos, WAF, etc.). • Respond to security incidents by following established procedures. • Track and apply security updates and patches to systems and applications. • Maintain an inventory of the CMDB • Assist in the preparation and completion of internal and external security audits. • Follow recommendations from audits to improve security. • Ensure that the organization's systems and procedures comply with relevant regulations (ISO/IEC 27001, PCIDSS) • Reporting and Communication, assist with documentation and reporting required for compliance • Raise staff awareness of security risks and phishing techniques. • Ensure that the principles of least privilege are respected. • Collaborate on various projects aimed at improving the security of information systems. • Propose improvements and innovations in terms of security. • Write and carry out annual PSI tests (PCA/PRA) and major incident mitigation plan (intrusion, dlp, IDS, Ddos) • Carry out OWASP vulnerability risk analyzes and enforce hardening guides, and respond to security and regulatory audits

• Intensive experience on BUILD and RUN, and management role • Field technician supervisor, Provide support for helpdesk support technician for major and/or urgent problems with LAN or any of its components. • Document all troubleshooting and incident management actions via the electronic incident management system in a timely manner. • Coordinate deployment of the technical solution, including internal acceptance testing and delivery of needed documents (Low Level Design Documents) • Review monthly activity, articulate and implement Action Plans relating to identified IT needs. • Have a key role in the quality customer support, in the deployment of services, and report functionally (project organization) to the local operations ICT manager • Responsible for the handover process of the technical infrastructure to operational teams • Perform File Server backups (weekly full backup, daily incremental on file server, and monthly backups of file server and users data). Using Symantec BackupExec, confirm scheduled backup jobs are successful. In conjunction with International IT, perform quarterly data recover validation from backup. • Monitor server logs and perform necessary operations to ensure the proper state of the systems, onsite firewall, managing VPN accounts, Monitor storage Server (Group Policy, NTFS permissions, EFS).

Intensive experience on IT PROJECT technical aspect and BUILD. Lead Technical After Sales Support for over 5 countries in Africa where DEVEA have Point of Sale or distribute her products • Provide a professional first point of contact for the Customer. Telephone support and night maintenance Windows activity if required • Diagnose fault-related cases both proactive and reactive by effectively utilizing software diagnostics and other network/products utility program wherever possible • Provide timely and professional technical support for all technical incidents received by phone or through all After Sales Service tools. • Resolve most of the incidents on all sales products (PC, desktop, printer, inverter, phablet, servers, San systems, switches, routers ...). • Coordinate with all the necessary manufacturer technical departments or vendors to achieve fault resolution within SLA definitions. • Ensure on time resolution, by escalating to the appropriated brand experts and management when necessary.

• work mainly on IT PROJECT and BUILD • Install, configure and manage network infrastructure devices (switches, routers, firewalls, wireless controllers and AP's, SSL VPN, WAN compression, etc.) • Do technical design for projects and major changes. Create work breakdown structure and estimate high level effort for individual tasks. Share tasks across the team and lead work items to closure • Maintain and ensure the reliability and performance of LAN, WAN, and VPN components and technologies across our customers • Respond, troubleshoot, identify root cause and remediate issues in a complete, documented and timely manner • Maintain network equipment for worldwide sites. Replace hardware (working with on-site resources), resolve technical issues and manage support with manufacturers and ISPs • Maintain and ensure that backups of all configurations are done on a routine and consistent basis, keep firmware up-to-date. • Ensure that appropriate monitoring, alerting and logging mechanisms are in place and functioning optimally all the time • Create, maintain and ensure the accuracy of all documentation related to network hardware, software, configurations and processes • Ensure compliance and provide evidence as required for regulatory audits (e.g. SOX) • Identify current operational process inefficiencies and provide recommendations for improvement

• Design, configure, and test computer hardware, networking software and operating system software. • Install and upgrade of PC software packages. Provide all relevant technical documentation. • Knowledge of network protocols and other hardware such as printers and scanners. • Ensure that all computers were protected against viruses and updates were applied and installed regularly. • Configure and define parameters for installation or testing of local area network (LAN), hubs, (Cisco)routers, switches, or related networking equipment. • Responsible for network testing, cable and troubleshooting to maintain loop‐free network operations. • Experienced in configuring Routing protocols. Designed, implemented, and configured complex switching and routing environments using routers, LAN switches, and VLANs. • Identifies, locates, and resolve network failure and evaluation in order to optimize network performance. • Ability to effectively troubleshoot strong problem solving skills. • Assisted the Sr. System Administrator with answering calls and answers escalated or referred customer representative help desk calls from the staff. • Performed data backups and disaster recovery operations . • Proficient at User and Security Group Active Directory administration for computer accounts, user accounts, distribution lists and security groups in Server 2008 Domain • Experience in troubleshooting user account access issues