Hafssa D.

Compétences

• Entra ID4/5
• Active Directory4/5
• ANSSI3/5
• ISO 270013/5
• NIST3/5
• RGPD3/5
• IAM4/5
• SAFe4/5
• Azure3/5
• SQL3/5
• EBIOS3/5

Expériences

1. International Relocation & Cybersecurity Activities – Singapore

   September 2024 — August 2026

   •  HSM EDF Group - Project completion: Led the completion of a major IT/OT network segmentation and isolation project, assessing business impacts, service dependencies and fallback solutions for different isolation scenarios  ISC2 CISSP – Certification achieved in 2026 •  ISACA – SheLeadsTech Singapore | Volunteer o Participated in cybersecurity, technology and leadership webinars o Contributed to Microsoft Entra ID (IAM) Identity Security project

   • Entra ID
   • IAM

2. Cybersecurity Architect Consultant

   April 2022 — July 2024

   • Collaborated with EDF Group Corporate Cybersecurity and Global IT teams through regular cybersecurity reviews to implement • Group security requirements across critical infrastructure supporting approximately 200 industrial dam control sites. •  Conducted IT/OT architecture assessments, analysing network interconnections, data flows and security dependencies  Conducted Active Directory audits and privileged access reviews using ORADAD, reaching ANSSI maturity level 4  Oversaw endpoint protection strategy for geographically dispersed operational technology (OT) environments  Coordinated with data center providers to enhance infrastructure security posture, performance, and business continuity readiness

   • Active Directory
   • ANSSI

3. Infrastructure & Security Project Lead

   March 2017 — March 2022

   • Led infrastructure and security operations in IT/IOT environment, managed a technical team, and defined and maintained the organization's security policies and controls, aligned with organizational risk objectives. •  Supported secure enterprise infrastructure across firewalls, Active Directory, virtualization platforms, SQL databases, web applications, enterprise networks, and Azure Cloud •  Implemented a business continuity and disaster recovery framework, including an operational hot site ensuring high availability and rapid recovery during major cybersecurity incidents. •  Managed relationships with security, technology, and business stakeholders to identify and communicate security risks and mitigation strategies •  Ensured alignment with security governance frameworks and regulatory requirements (APSAD, ISO 27001, NIST, GDPR principles)

   • Active Directory
   • ISO 27001
   • NIST
   • RGPD
   • Azure
   • SQL

4. Web Risk Assessments (Master's SAFE Work-study Project)

   Sep 2015 — July 2016

    Conducted vulnerability and risk assessments for web application using EBIOS Risk Manager

   • EBIOS
   • SAFe

5. System & Network Engineer

   2012 — 2013

6. Infrastructure Consultant

   2006 — 2011