Open to opportunities

Claudy AUGIS

@claudyaugis

Message

Senior cybersecurity consultant specializing in GRC, cloud security and CSPM for complex enterprises.

France

Message

What I'm looking for

I’m looking for a senior role where I can lead GRC-to-cloud security programs end-to-end: controls migration, compliance evidence, cloud posture improvements, IAM governance, and measurable risk reduction—working in cross-functional teams with clear milestones.

I bring 8+ years of cybersecurity experience focused on GRC, cloud security, and risk governance, supporting complex banking, insurance, and industrial environments. Across multi-entity international contexts, I coordinate 70–80% of activities in English and drive security deliverables through every program milestone.

In my most recent role, I manage cloud security controls migration and deployment—creating and monitoring ~30 controls on a GRC platform (ServiceNow), delivering compliance scoring, and building KPI dashboards in Power BI. I also supervise “Move to Cloud” security by analyzing application risk by criticality, defining cloud security controls, qualifying cloud environments, governing Azure accounts, and aligning implementations with group requirements and cloud standards (including CIS Benchmarks and ISO 27017).

I strengthen governance across IAM, compliance, and security operations: I lead PAM implementations (CyberArk, SailPoint), run annual access reviews, and support PCI DSS v4.0 compliance with evidence collection and control maintenance. I assess cloud posture using Microsoft Defender for Cloud, contribute to CI/CD security and GSOC support through SAST/DAST and threat-detection playbooks, and extend controls to AI governance (EU AI Act, ISO 42001) with a “Secure by Design” mindset.

Experience

Work history, roles, and key accomplishments

Senior GRC Cybersecurity Consultant

BNP Paribas

May 2023 - May 2026 (3 years)

Led security GRC projects across 7 European entities, coordinating 70–80% of activities in English and reporting to security and COMEX steering committees. Managed cloud security supervision (Move to Cloud) and closed ~20–30 critical risks, coordinating collection/validation of 100+ compliance proofs and creating/monitoring ~30 controls in ServiceNow with KPI reporting in Power BI.

EBIOS RM ISO 27001 27002 NIST CSF Power BI Compliance Dashboards PAM (CyberArk SailPoint)

GRC Consultant

Enedis

Jun 2022 - May 2023 (11 months)

Designed, piloted, and continuously improved security control plans across business pillars, driving compliance reporting and security indicator follow-up. Supported governance processes using structured compliance documentation and Jira-based work tracking.

Information Security Governance Compliance Management Compliance Reporting Jira

GRC Consultant

Allianz France

Mar 2021 - May 2022 (1 year 2 months)

Performed EBIOS RM risk analyses across the Allianz France application portfolio and assessed essential suppliers’ compliance and associated risk levels. Facilitated workshops with business and technical stakeholders and produced risk analysis reporting and interview minutes to support security measures and approvals.

EBIOS RM Risk Analysis Workshop Facilitation Risk Reporting

GRC Consultant

Société Générale

Mar 2021 - May 2022 (1 year 2 months)

Conducted EBIOS RM risk analyses for Société Générale’s application portfolio and related services, including vendor risk analysis and contract reviews. Supported compliance reviews against defined security criteria and assisted security projects with negotiation of contractual security clauses.

EBIOS RM EBIOS 2010 ISO 27001 Contract Review ISMS Policy Support

Digital Security Expert

Copwell

Nov 2019 - Mar 2021 (1 year 4 months)

Performed EBIOS 2010 risk analyses and supported GDPR compliance efforts, contributing to the development of a PSSI. Delivered penetration tests, physical security audits, and infrastructure hardening, and ran cyber awareness sessions and security wargames.

EBIOS 2010 GDPR Compliance Penetration Testing Infrastructure Hardening Physical Audits Workshop Facilitation Wargaming

Systems & Network Administrator

Harvest

Nov 2017 - Nov 2019 (2 years)

Administered Active Directory (≈250 accounts) including OUs, groups, and GPOs, and managed endpoint imaging and office suite migrations. Built and operated SCCM/GLPI-based management, maintained core network services (DNS/DHCP), and supported infrastructure via VMware/ESXi, Cisco switching, and firewall configuration, using PowerShell automation and Jira/Zendesk ticketing.

Active Directory (GPOs SCCM Firewall (NAT SNMP)PowerShell VMware ESXi Citrix

Support Technician (N1/N2)

Securitas France

Mar 2016 - Nov 2017 (1 year 8 months)

Provided N1/N2 support for applications and endpoints, including smartphone email configuration and PC maintenance. Installed and administered IBM/Lotus Notes (clients and servers), managed Active Directory, and supported monitoring and messaging/archive migration from Lotus Notes to Microsoft O365.

Active Directory Management