Open to opportunities

jean-michel Gedeon

@jean-michelgedeon

Message

I lead cybersecurity governance, ISO 27001 audits, and third-party risk management.

France

Message

What I'm looking for

I'm looking to lead cybersecurity governance, risk, audit, and compliance work in complex, international, and regulated environments, partnering with IT, legal, risk, and executive stakeholders to embed security into strategic projects.

I lead cybersecurity governance, supplier audits, risk assessments, and security-by-design reviews as a Cybersecurity Manager and Auditor. I assess IT systems, Kubernetes infrastructure, containers, and project security requirements while delivering actionable audit reports and remediation recommendations.

Across Orange’s Network and Services Technical Division, I led risk analyses, treatment plans, KPI reporting, critical-asset reviews, and configuration and penetration-testing audits. I also built a department risk-mapping tool to consolidate assessment and audit findings for decision-making.

I teach ISO/IEC 27001 and ISO/IEC 27005 governance at EFREI Paris and ESIEE-IT, preparing engineering students for Lead Implementer and Risk Manager certifications. My work spans ISO 27001, ISO 27005, EBIOS RM, GDPR, cloud security, industrial cybersecurity, and supplier risk across regulated environments.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Manager and Auditor

Current

DTR

Jan 2022 - Present (4 years 8 months)

Conducted organizational supplier audits based on ISO 27001 Lead Auditor standard, provided recommendations through detailed audit reports, and managed configuration and penetration testing audits on DTR projects.

ISO 27001 Security Audits Penetration Testing Kubernetes Security By Design OT ICS Security Risk Management

Current

Lecturer and Trainer for ISO/IEC 27001 and 27005

Current

EFREI Paris

Jan 2020 - Present (6 years 8 months)

Prepared M1 and M2 students for ISO/IEC 27001 Lead Implementer and ISO/IEC 27005 Risk Manager certifications, and provided consulting and coaching for cybersecurity projects.

ISO 27001 ISO 27005 Training Coaching Cybersecurity

Cybersecurity Risk Manager / Security Governance Lead

DTR

Jun 2018 - Dec 2022 (4 years 6 months)

Led cybersecurity governance and risk analyses across critical scopes, defined risk treatment plans, and monitored cybersecurity KPIs and compliance with legal obligations.

Risk Management ISO 27001 EBIOS Security Governance KPI Monitoring Compliance

Security Architect

Orange

Jul 2016 - Jun 2018 (1 year 11 months)

Conducted security risk analyses, managed infrastructure and penetration testing audits, and deployed a new dedicated WiFi infrastructure in compliance with security requirements.

Security Audits Risk Analysis Penetration Testing GDPR Wi Fi Security

Junior IS Security Consultant

Altran Technologies

Nov 2015 - Jul 2016 (8 months)

Deployed the IKARE vulnerability audit solution, managed quarterly audits and remediation follow-up, and implemented encryption solutions for workstations and shared storage.

Vulnerability Management IKARE Bitlocker Encryption MBAM

End-of-studies Project

MUREX S.A.S

Jan 2015 - Jul 2015 (6 months)

Designed and implemented a monitoring infrastructure using CENTREON for the network support team to improve proactive service availability management.

Centreon Monitoring Network Operations