Open to opportunities

Hichem KHATTECH

@hichemkhattech

Message

I lead cyber risk management for critical infrastructure, building pragmatic GRC, resilience and compliance frameworks.

France

Message

What I'm looking for

I'm looking to lead cyber risk, GRC and resilience work where pragmatic security frameworks strengthen critical systems, regulatory compliance and business continuity.

At GRDF, part of ENGIE Group, I lead cyber risk management for Europe’s largest gas distribution network across IT and OT/ICS systems. I run risk assessments, risk-treatment decisions, remediation tracking and security-by-design practices for critical projects and systems.

I’m driving GRDF’s NIS2 compliance trajectory and regulatory requirements as an Operator of Vital Importance, in partnership with the CISO and national authorities. My work connects cyber risk with business continuity, crisis management and operational resilience.

Before GRDF, I led cyber risk, resilience and digital trust engagements at Capgemini Invent, including DORA critical-service mapping for BNP Paribas, the cybersecurity programme for the Paris 2024 Olympic and Paralympic Games at RATP, and SWIFT’s Zero Trust transformation roadmap.

Across Capgemini Invent, Accenture Security, Sia Partners and CGI, I’ve delivered 40+ engagements in GRC, audit, security by design and cyber strategy. I’ve led teams of up to 13 people and build security frameworks that are pragmatic and built to last.

Experience

Work history, roles, and key accomplishments

Current

Head of Cyber Risk Management

Current

GRDF (ENGIE Group)

May 2026 - Present (4 months)

Accountable for the cyber risk management function of GRDF, a designated Operator of Vital Importance, covering information systems and industrial systems (OT/ICS). Leading cyber risk assessments (EBIOS RM), building the cyber risk function, and driving NIS2 compliance.

EBIOS RM NIS 2 ISO 27001 GRC Risk Assessment OT ICS Security Team Management Generative AI Agentic AI

Senior Manager – Cyber Risk, Resilience & Digital Trust

Capgemini Invent

Oct 2022 - May 2026 (3 years 7 months)

Accountable for cybersecurity consulting delivery and pre-sales across a broad range of industries, leading large multidisciplinary and international teams. Led end-to-end mapping of critical business services for BNP Paribas as part of DORA compliance and served as Cybersecurity Programme Director for the Paris 2024 Olympic and Paralympic Games at RATP.

DORA Business Continuity Crisis Management Zero Trust Cloud Security AI Security Team Management

Manager – Cyber Strategy, Risk & Compliance

Accenture Security

Jul 2021 - Oct 2022 (1 year 3 months)

Led cybersecurity strategy and governance, risk and compliance consulting engagements for clients across a range of industries. Built a cloud third-party audit methodology for Crédit Agricole Consumer Finance and led the Tier 0 infrastructure audit for L'Oréal.

Cloud Security Audit GRC Risk Assessment Team Management

Senior Consultant – CIO Advisory & Cyber Risk

Sia Partners

Nov 2017 - Jun 2021 (3 years 7 months)

Delivered CIO Advisory engagements, providing expert guidance and strategic insight to clients across a wide range of sectors. Led EDF's shared service centre for security by design and built the GDPR compliance roadmap for Veolia Water Technologies.

Security By Design GDPR Risk Assessment Audit Team Management

Consultant – Digital Workplace & PMO

CGI Business Consulting

Mar 2014 - Oct 2017 (3 years 7 months)

Delivered Digital Workplace consulting engagements for clients across a range of industries. Acted as PMO for the intranet redesign programme at Hermès and contributed to the rollout of a SharePoint-based document management system for L'Oréal.

PMO SharePoint Digital Workplaces Project Management