The right expertise, mobilised at the right time.

With more than 27 years of experience in IT, including over 15 years in cybersecurity, Azad is an experienced professional who has held CISO, CIO and technology risk leadership roles. He specialises in cyber resilience, technology risk management, regulatory compliance and the application of AI to risk management.

He has led major cybersecurity and resilience transformations within complex international organisations, with particularly strong expertise in DORA, NIS2, ISO 27001, NIST, TPRM and operational resilience. His expertise includes designing and implementing cyber resilience frameworks, analysing critical systems and their dependencies, business impact analysis, crisis management, business continuity, incident response and continual improvement.

In his current role at a major public-sector financial institution, he leads initiatives combining DORA compliance, second-line-of-defence governance, third-party security and AI-enhanced TPRM. He uses artificial intelligence to strengthen risk analysis and compliance assessments of suppliers and service providers.

His background also includes significant experience as Global Chief Resilience Officer. In that role, he designed and implemented a cyber resilience framework, assessed the dependencies of critical systems and infrastructure, aligned incident response and business continuity arrangements, and established testing and continual improvement programmes.

Azad also brings a strong focus on innovation and emerging technologies, with hands-on experience in AI, deep learning, RPA and process automation. He has led initiatives to automate business and IT processes while maintaining high levels of security and operational control.

Alongside his executive responsibilities, Azad teaches engineering and MBA students about cyber resilience and risk management, as well as subjects such as ISO 27005, EBIOS RM and data centres.

His value lies in his ability to connect cybersecurity, resilience, risk management, regulatory requirements and emerging technologies. This helps organisations remain secure, resilient, compliant and operational in an increasingly complex digital environment being transformed by artificial intelligence.

Gilles is a senior banking, cybersecurity and regulatory compliance professional with more than 20 years of experience in the banking sector, gained across France, the United States and Southeast Asia, including 12 years with HSBC in Commercial Banking and Global Banking environments.

Since 2021, he has specialised in cybersecurity, regulatory compliance, artificial intelligence and operational resilience, combining extensive hands-on banking experience with a strong understanding of regulatory and technology risk. He is a certified DORA Lead Manager and regularly contributes to international conferences, including the inCyber Forum in France, Luxembourg and Morocco, addressing operational resilience, cybersecurity and regulatory compliance across the financial sector and other critical industries.

Gilles places particular emphasis on the human dimension of operational resilience. He considers training, awareness and the development of a strong resilience culture to be essential components of an effective operational resilience framework, alongside governance, technology and risk management.

His expertise covers DORA, NIS2, GDPR, MAS TRM and ISO 27001, with a particular focus on translating regulatory requirements into practical measures that can be understood and implemented by business, technology and risk teams. His work at the intersection of banking, AI, cybersecurity, regulation and human factors enables him to bridge the gap between regulatory expectations and operational reality.

Karim, PhD, CISSP and CCSP, is a senior cybersecurity and transformation professional with 20 years of experience leading complex security, resilience, audit and regulatory compliance initiatives.

He works across a broad range of environments, including banking, financial services, payments, capital markets, industry, cloud and the public sector, supporting organisations through transformation and compliance programmes.

His background combines project and programme leadership, cybersecurity governance, audit, risk management and compliance, with particular expertise in DORA, NIS2, PCI DSS, operational resilience, cloud security and AI-enabled security solutions.

Working at the intersection of business, technology, risk and regulation, Karim turns complex requirements into practical roadmaps and operational transformation programmes. He is also a PECB Certified Trainer.

Mauro is an expert in cybersecurity, artificial intelligence and cyber resilience. An ISO 27001 specialist and expert for the European Commission, he helps organisations move from a protection-focused approach to cybersecurity towards a comprehensive resilience strategy.

He explores the use of AI to anticipate threats, automate incident detection and response, test the robustness of defences, and strengthen organisations’ ability to continue operating in the face of cyberattacks.

He believes the question is no longer simply “How can an attack be prevented?” but “How can operations continue when one occurs?”

As an enterprise architecture and information systems transformation consultant, holding TOGAF 10 Foundation, ArchiMate 3 Foundation and Practitioner certifications, Martin turns business challenges into concrete, efficient and value-creating solutions.

From opportunity assessment through to operational implementation, he secures every stage of a project to accelerate delivery, control risks and maximise return on investment.

He structures programmes, optimises resources, manages budgets and timelines, and gives decision-makers clear governance through effective steering of executive and project committees.

Whether working in Agile or V-model environments, he adapts delivery methods and arrangements to the client’s objectives to ensure measurable, lasting results.

His expertise in life and non-life actuarial matters covers pricing, reserving and claims analysis, directly supporting model reliability and decision quality.

His command of Solvency II and regulatory requirements strengthens compliance, reduces risk exposure and improves process reliability.

He also supports change management to encourage adoption and embed transformations over time.

His experience in banking, insurance, asset management, accounting, finance and business-led information systems projects enables him to provide pragmatic responses aligned with business priorities and expected outcomes.

Parham is a senior expert in operational resilience, cybersecurity and the technological transformation of financial institutions. As a DORA Lead Manager, he led DORA Cyber compliance for France’s only banking clearing house subject to daily supervision.

A Senior Lead Auditor & Implementer for ISO/IEC 27001, he connects cybersecurity, technology, business and procurement functions. He turns indeed technical expertise into real negotiating power.

His expertise also covers SecNumCloud and the monitoring of PASSI audits and reviews relating to RGS and LPM requirements. He leads the three key stages of an EBIOS Risk Manager approach: risk analysis, pre-audit and audit required for SecNumCloud approval.

As a Senior Lead Trainer, he helps executives and teams understand and apply DORA, the AI Act and security frameworks. He has extensive expertise in banking communications and secure financial data exchanges, particularly through the EBICS TS protocol. His cross-functional perspective enables him to quickly identify vulnerabilities, critical dependencies and deviations from plans, helping to shape the direction of projects.

He is currently developing approaches that combine artificial intelligence, quantum cybersecurity and tokenisation to prepare financial infrastructure for future changes.

Drawing on his cross-functional perspective and extensive field experience, Parham rapidly identifies vulnerabilities, operational weaknesses and areas for improvement within the organizations he supports, before implementing practical solutions to enhance efficiency, security and resilience.

Aleksander is a consultant specialising in AI architecture, software engineering and training. He supports organisations in the practical integration of artificial intelligence across their operations.

His expertise covers software architecture, AI agent systems, tool integration, automation and AI-assisted development solutions.

He works with business leaders, operational teams and technical teams to turn business needs into appropriate, controlled and scalable solutions.

His training programmes on generative AI, automation and AI agents combine accessible explanations, demonstrations and practical exercises tailored to participants’ experience.

His technical background provides a practical understanding of AI capabilities, limitations and implementation requirements.

His approach emphasises stability, security, testing and human oversight to ensure reliable AI applications and strengthen team autonomy.

Anas is a cybersecurity engineer specialising in risk management, operational resilience and AI system security. He has led EBIOS RM risk assessments and NIS2/GDPR compliance initiatives on critical systems, acting as both security architect and risk manager. He designs crisis-management, business-continuity and incident-response frameworks, drawing on experience in SOC operations and penetration testing. His work also covers the development and security of AI models for risk management, including assignments at IBM, WEHI in Australia and major corporate groups. In the biomedical sector, he was responsible for securing an entire platform as the organisation’s sole cybersecurity engineer.

A senior cybersecurity expert and ANSSI-recognised Technical Evaluator, Arnaud specialises in cyber resilience, security architecture, cyber intelligence and offensive security for critical and sensitive environments.

He serves as an Evaluation Manager and Technical Evaluator within the ANSSI PACS, PASSI and PAMS qualification schemes, bringing recognised expertise in cybersecurity assessment and compliance.

His certifications include CISSP, CEH, ISO 27001 Lead Auditor and DORA Implementer, as well as a certification in AI penetration testing.

His expertise spans Red Team, penetration testing, risk assessment, OSINT, Cyber Threat Intelligence and Dark Web and infostealer monitoring.

He also develops approaches combining artificial intelligence, machine learning and cybersecurity, including malware detection.

With experience at Axa, Eviden, Chanel, Airbus and the French Ministry of the Armed Forces, he combines technical depth, regulatory expertise and operational experience to strengthen cyber resilience.

Aurélien is a senior consultant specialising in cyber resilience, IT governance and third-party risk management (TPRM). With more than 20 years of experience in international and regulated environments, he supports organisations in managing ICT risks, business continuity, critical third-party governance and DORA requirements. A former LATAM CIO, he combines executive-level perspective, hands-on crisis-management experience and the governance of complex supplier ecosystems.

Céline is a legal professional specialising in data protection, digital technologies and healthcare, with more than 15 years of experience in intellectual property, IT law, research, healthcare and personal data protection. Since 2018, she has supported organisations as a consultant and external Data Protection Officer. An AFNOR-certified DPO and Digital Ethics Officer (DEO), she works in complex and highly regulated environments.

She has developed a particular focus on artificial intelligence, AI governance and the operational implementation of the EU AI Act. Her approach is to make compliance a driver of resilience in the face of digital, regulatory and technological risks. She places ethics, accountability and the protection of individuals at the heart of digital and AI projects. Convinced that resilience also depends on teams understanding and taking ownership of these issues, she places particular emphasis on awareness and knowledge sharing. Her work is pragmatic, rigorous and centred on people.

Clément works as a cybersecurity consultant within the R’U Safe team. His background combines cybersecurity training at CESI with experience in systems, networks and IT security. He holds the eJPT certification and has a particular interest in cyber resilience: securing infrastructure and strengthening its ability to withstand and respond to incidents. He also develops software alongside his cybersecurity work and explores applications of artificial intelligence and automation to support analysis and reduce repetitive tasks.

Corinne is an ISO/IEC 27001 auditor, a certified Data Protection Officer and a PhD in Computer Science. She teaches at Paris 1 Panthéon-Sorbonne University, notably within the IKSEM Master’s programme, and has more than 25 years of experience in education and organisational capability building.

As a human-factor specialist, she designs innovative learning programmes that sustainably strengthen cybersecurity culture and operational resilience.

Her expertise also covers responsible AI governance, data protection and the management of risks arising from emerging digital technologies. She supports organisations in raising awareness of AI-related risks, promoting responsible practices and understanding regulatory requirements.

Her diagnostic tools also help measure employee maturity and assess the return on investment of cybersecurity, AI and resilience awareness programmes.

A CISSP- and CISA-certified expert, Edmond brings extensive expertise in IT risk management, governance and operational resilience (DORA, ISO 27001, NIST). His background includes designing effective internal control frameworks, leading business continuity programmes and conducting complex IT audits in demanding environments.

Alongside this expertise, he explores innovative AI solutions, including local LLMs, RAG architectures and autonomous agents, to automate risk analysis and improve the processing of unstructured data.

He brings this broad perspective and technological expertise to your projects.

Eric draws on more than 25 years of experience in executive leadership, consulting, finance and management, in France and internationally. His career began in a particularly demanding operational environment as an officer and combat pilot. This taught him early on to make decisions in complex situations, assess risks, act under pressure and take full responsibility for his decisions. It also shaped his view of leadership, grounded in preparation, collective discipline, trust and the ability to unite a team around a mission.

This operational background was later enriched by a strong international perspective, notably through his MBA at HEC and the various positions he has held throughout his career. His work has spanned management, consulting, corporate finance and strategy, bringing him into close contact with executives and shareholders. He has supported businesses through growth, transformation and major decisions, often in complex or high-stakes environments. His corporate finance experience has placed him at the heart of issues affecting organisations’ strategy, funding, shareholders and future.

This breadth of experience has shaped his approach to governance, combining strategic perspective with an understanding of operational realities. He sees governance as the point where sound decision-making, clear responsibilities, risk management and execution must come together. His practical experience also informs his focus on organisational resilience and the ability to navigate uncertainty and disruption.

His involvement with the IHEDN community extends this approach through reflection on strategy, sovereignty and security. He combines operational experience, advanced education, financial and management expertise, an international outlook and a commitment to strategic issues. This enables him to bring an independent, pragmatic and strategic perspective to a governing body, firmly grounded in operational realities. Eric now puts this breadth of experience at the service of rigorous, responsible governance that translates decisions into action and value creation.

Fella is a senior consultant specialising in financial transformation and the delivery of complex strategic programmes.

She brings strong expertise in capital markets, investment banking, asset management, and operational and financial risk management.

Her experience includes trading environments, financial market infrastructures, and platforms such as Sophis Risk and Fusion Invest.

She supports major migration, decommissioning, compliance and change-management initiatives.

Her approach combines business expertise, IT coordination and robust risk governance.

She successfully aligns multidisciplinary and multicultural teams around demanding quality, delivery and budget objectives.

Experienced in highly regulated environments, she coordinates business, operations, risk, compliance, legal, cybersecurity and IT stakeholders.

Fella helps financial institutions and large organisations secure critical transformations and achieve sustainable operational performance.

An expert consultant and trainer in information systems governance, François has helped organisations structure and optimise their IT services for more than 30 years. His assignments for major groups (Hewlett-Packard, IBM, Getronics) and his work within the companies he founded have enabled him to develop recognised expertise in IT process improvement, data centre management and outsourcing services.

As a senior consultant, he has led numerous ITSM and digital transformation programmes in critical sectors, including the nuclear industry, healthcare and long-term care, and business continuity. His expertise also covers IT security, sensitive data hosting and the governance of outsourced infrastructure.

Certified in DORA and ITIL, and as a Lead Implementer for ISO 27001, 20000 and 22301, he works on governance, risk management and business continuity frameworks. Today, he contributes to systematic, independent approaches to DORA compliance, focusing on governance and alignment between regulatory requirements and operational practices.

Building on this work, he helps executive teams develop resilience strategies in which artificial intelligence plays a central role: anticipating systemic risks, strengthening business continuity and adapting dynamically to DORA requirements. He believes AI is not a standalone technology initiative, but a driver of transformation that redefines governance and operational sovereignty.

Gilles holds ISO27001 Lead Implementer, ISO27005 Risk Manager and ProCSSI (Information Systems Security Professional) certifications. With 20 years of experience as a Chief Information Security Officer (CISO) and in implementing disaster recovery and business continuity plans in critical real-time environments, he brings extensive expertise in information systems resilience.

Gilles supports clients in achieving compliance and improving the maturity of their information systems. He teaches network security to final-year students at CY-TECH engineering school. He also trains future ANSSI cybersecurity assessors and contributes to Campus Cyber’s “NISv2” and “Référent cybersécurité” working groups.

With extensive experience as a lawyer and Data Protection Officer (DPO) at the University of Burgundy, Kevin combines sharp legal expertise with a strong interest in technical subjects and innovation.

Driven by an ethical vision of digital technology, he places the defence of fundamental rights and freedoms at the heart of his work. A hands-on professional and skilled communicator, he supports organisations in their regulatory compliance (GDPR) by translating legal constraints into strategic opportunities, while developing a shared culture of digital responsibility.

Kevin is a certified ISO/IEC 27001 Lead Implementer with three years of experience in this field. He applies this knowledge as a Chief Information Security Officer within the companies of his group, with particular responsibility for organisational resilience: business continuity planning, disaster recovery planning and IT charters.

With a sound understanding of enterprise IT systems, he is currently developing his expertise in the business use of artificial intelligence to address emerging security and digital transformation challenges.

Luis is a senior consultant with more than 20 years of experience in critical digital infrastructure, energy and risk management. He currently leads the energy strategy for a portfolio of 35 data centres across more than 25 international markets, supporting AI, cloud and high-density computing environments.

His expertise spans energy availability, grid capacity, data-centre resilience, and the protection and operational continuity of critical subsea telecommunications infrastructure.

Mehdi is an expert in international strategy, organisational resilience and transformation, with more than 20 years of experience in the automotive, mechanical engineering and technology sectors. He has extensive experience in market development, subsidiary and OEM project management, international tenders and the leadership of multicultural teams in complex and changing environments.

He has a proven ability to anticipate disruption, adapt operational and commercial models, and turn constraints into opportunities for growth, particularly in demanding international contexts across EMEA, Asia and Africa. Strongly focused on results and innovation, he is particularly interested in integrating artificial intelligence into strategy, decision-making and business development to strengthen agility, resilience and sustainable organisational performance.

Mickael has thirteen years of experience in IT risk management, cybersecurity, and regulatory compliance, gained through leading consulting firms (Deloitte, PwC, Accenture, and Onepoint), followed by experience with LSEG (London Stock Exchange Group). He primarily supports financial sector organisations in strengthening their risk management, cybersecurity, and operational resilience frameworks, as well as in achieving compliance with key regulatory frameworks (DORA, GDPR, SOX, Regulation SCI) and industry standards and frameworks (NIST, ISO/IEC 27001, COBIT, ISAE 3402). His areas of expertise include risk governance, IT and cyber risk management, operational resilience, and process optimisation. He is certified as an ISO/IEC 27001 Senior Lead Implementer and is currently pursuing the PECB DORA Lead Manager, PECB Certified Trainer, and ISO/IEC 42001 certifications, the latter relating to AI management systems.

Nicolas is a consultant specialising in AI architecture, advisory services and training. He supports organisations in understanding, adopting and integrating artificial intelligence.

His expertise includes identifying use cases, improving business processes, designing AI assistants and automation solutions, and developing business platforms.

He supports projects from initial needs assessment through operational implementation, taking into account each organisation’s objectives, constraints and user requirements.

His training programmes for business leaders and teams are based on real-world situations, guided experimentation and lessons learned from practical projects.

His approach combines business vision, knowledge transfer and technical implementation, with particular attention to data control, solution reliability and meaningful human oversight.

He thereby contributes to the sustainable, secure and responsible adoption of artificial intelligence.

With fifteen years of experience in compliance and risk management, Pénélope is an expert in digital operational resilience. As a consultant and trainer, she helps organisations meet compliance requirements in the face of technological challenges, including cybersecurity, DORA and the AI Act, and strengthens the governance of contextual data. Skilled in assessing sensitive profiles, including political figures and NGOs, she also works on foresight in AI, particularly NLP, and human resources. Combining technological, linguistic and ethical insight, she integrates inclusion, semantic governance and the humanities to keep people at the heart of digital transformation.

Pascal is the CEO of consulting businesses, a consultant and a speaker.

He sees people and organisations as two drivers of performance that need to be developed together. For more than 25 years, he has supported the people within the client organisations that place their trust in him. He specialises in team and organisational management, with particular expertise in areas such as psychosocial risks. He believes every person is unique and aims to bring out their talents.

His strengths are leadership and people management. His approach centres on understanding the people involved and the meaning they give to their actions. He takes a pragmatic approach to broadening the range of possibilities and identifying the keys to improved performance.

Passionate about the automotive world, he applies his expertise in an environment where anticipation and stress management are everyday demands. His resilience helps him turn difficulties into opportunities for progress.

Prasanthi is a Senior Risk & Data Manager and Product Manager with over 20 years of experience within international financial institutions. She supports organisations in transformation, risk management and operational resilience initiatives, bridging business, regulatory, data and technology challenges. At LCH SA, she spent 18 months contributing to DORA compliance and strengthening the Third Party Risk Management framework, with a particular focus on ICT providers, critical third parties and exit strategies. Her background in Data Management, automation and digital transformation enables her to approach AI-related challenges through the lens of risk management, governance and organisational resilience.

Samy is a senior Governance, Risk & Compliance (GRC) consultant, CISA- and ITIL-certified, with expertise in the European DORA, NIS2 and PSD2 regulations. He supports financial organisations, fintechs and mid-market companies with regulatory compliance, IT risk management and operational resilience, delivering simple, effective solutions that are ready to use.

He works on high-impact assignments: risk mapping, DORA/NIS2 maturity assessments, IT audits, reviews of essential providers, management of major incidents, and leadership of digital and IT transformation programmes. His expertise also covers risks associated with artificial intelligence, an increasingly important issue for organisations seeking to secure their use of AI.

Samy stands out for a pragmatic, results-oriented approach that turns complex regulatory requirements into robust, audit-ready processes suited to operational realities. He brings a cross-functional perspective spanning IT, security, compliance, risk and governance, which is essential to accelerate and secure regulatory transformation projects.

Serge has 48 years’ experience in managing security projects and teams. He notably created the French National Gendarmerie’s Criminal Research Institute (IRCGN). Certified by PECB in ISO 27001 and as a DPO, and by Bureau Veritas as a DPO, he has focused for the past nine years, as a consultant and trainer, on information-systems security, risk analysis, personal-data protection (GDPR) and resilience through crisis exercises.

Stéphane has 30 years of experience, notably in the automotive industry across 12 European countries, production-line integration, the commercial development of university campus activities, and industrial-performance consulting at Deloitte/In Extenso.

As CEO of FSURCONSEIL SARL since 2022, he has developed multidisciplinary methods since 2015 across human resources, Lean, strategy, CSR, financing, legal matters, and digital, AI and cybersecurity topics.

His approach transforms industrial-performance engagements by coordinating specialist expertise in parallel. More than 300 assignments have been delivered through this model since 2015.

With certifications including Master Black Belt, Lean Six Sigma, ISO 9001, ISO 14001 and ISO 50001, Stéphane brings project-management and industrial-performance expertise to organisations.

Venkata is a Cybersecurity and GRC Analyst with hands-on experience in IT risk, compliance and access governance across more than 50 enterprise systems. He works on privileged access management (PAM), incident governance, and translating ISO 27001, SOX, NIST, GDPR and DORA requirements into effective operational controls. His command of Splunk SIEM, ServiceNow ITSM and Power BI supports risk-monitoring dashboards and audit readiness in regulated environments.

A strategy and transformation consultant for more than 14 years, Michael works at the intersection of governance, cybersecurity and change management in regulated, multicultural environments.

A native bilingual English and French speaker with professional proficiency in Spanish, he led the design of a sovereign cloud platform for LCH SA (LSEG) and coordinated a multilingual cybersecurity rollout for Grant Thornton International across 140 organisations in 140 countries.

An ESSEC MBA graduate, he is preparing to relocate to Geneva to bring these capabilities to internationally focused organisations.