Christophe H.

Global Bank June 2021 - Dec 2022 Solution security architect Credit Union: 2019-2020 Solution security architect US airline: 2018 Network and data security architect. Recommended rationalization of security tools and processes and roadmap for implementation . Represented security for the architecture and the design of the future data center in a box $15B manufacturing company: 2015-2017 CISO trusted advisor and security architect. Project Description: As the company moved to consolidate 15 data centers into 2, I was in charge of ensuring that best security practices were implemented .I defined a zone based data center architecture for over 2000 servers, where simple to manage role based access policies were implemented I also created a road map to reduce risk as security gaps were uncovered during an earlier audit. Head of security for the transformation office. Project Description: The company created a transformation office when it grew from 15000 to 50000 employees and became a Fortune 200 company. My role consisted in provided the vision for security for the company, as well as rationalizing the current security portfolio and processes. Heavy focus was placed on network security and endpoint security since it appeared as low hanging fruit with quick return on investment.

Data Security Assessments and Data Loss Protection Program for several clients Large Latin American bank, Project Description: Responsible for building from the ground-up a DLP lite program for the US operations of this Latin American bank. Fortune 100 Retailer: Data Security Strategy Project Description: After conducting a 6 weeks DLP assessment,I was tasked to review the data security strategy for the next 3 years and help the company address their gaps. I recommendeded solutions that would reduce the most significant risks while simplifying the security operations. Large Medical Center: Data Loss Protection Program Lead and Architect. Project Description: After having conducted an extensive data security assessment, the client selected IBM to implement a DLP and data encryption program to address the existing security gaps. I built the entire solution: requirements, architecture, implementation, policy definition, and framework of the governance model. I transition the program to the client for day to day management. Credit Report Company Project Description: The engagement consisted in assessing the maturity level of data security, identifying gaps and recommending tactical and strategic security initiatives. The engagement included a detailed evaluation of sensitive data in motion and at rest using data loss protection solutions. The final presentation to the executive committee proposed short term and far reaching strategic decisions that were very positively received by the executives and VPs Beverage company Data Security Assessment lead consultant and project manager Project Description: Data Security Assessment of the worldwide server infrastructure (Over 600 Servers) of the company. The results of the assessment lead to recommend the implementing a Data Loss Protection program to address tactically and strategically to the excessive exposure of sensitive data

Major Hospital Group: Mobile Workstation Encryption Project Trusted Advisor - Security Architect and Lead deployment Engineer Project Description: With HIPAA getting more teeth in 2010, this large hospital decided to deploy and enforce encryption on all mobile workstations. I was the lead architect for the project. Large Northeastern University: ISO 27002 Gap Assessment Project Description: As the lead consultant on the project, I interviewed over 40 people at the University to assess security in the following areas: # Security policy # Organization of information security # Asset management # Human resources security # Physical and environmental security # Communications and operations management # Access control # Information systems acquisition, development and maintenance # Information security incident management # Business continuity management # Compliance with PCI, FERPA, and HIPAA Mid-Size Insurance Company CIO Trusted Advisor Project Description: I was tasked to assess the Internet security and to provide recommendations for a NAC solution at this midsize insurance company. After presenting the assessment results, the Senior Executive for IT and operations extended Mr Henrion for 10 months and asked him to define the security and infrastructure priorities, to recommend resources and to lead the execution of over twenty initiatives. Some initiatives lead to: - cost saving (Telco cost trimming, deferred or cancellation of questionable investments) - increased productivity, (defining and enforcing IT policies such as Internet access) - security improvement through a company-wide deployment of a NAC(Network Access Control) solution. - Drastic reduction for potential exposure of Personally Identifiable Information. - improved quality (Implementation of additional formal processes). Finally, these projects accomplished the goal of closing very significant security gaps. (At the beginning of the engagement, only 2 out of 12 PCI criteria were met).

Assisted managers and executives who either had a temporary work assignment in Europe or who were coming on a temporary or permanent basis to NC.

Clients and projects include: Transportation Company: architect for VPN and Identity and access management. Major Contract Manufacturing Company: Remote Access VPN Project Description: As a Network Consultant, I architected, designed and implemented VPN and network solutions for various customers in the manufacturing, insurance, automotive and life science segments. For this very large project, I the technical lead of a complex remote access project spanning over 4 continents for 60,000 end users