Yacine Slimani

• - Developed and updated the cyber risk mapping of the Information System, covering threat assessment, existing controls and mitigation plans.

• - Collaborated with AXA Group and cross-functional teams, contributing to risk reporting and indicators shared with management and executive committees (Codir/Comex).

• - Conducted qualitative (Ebios RM) and quantitative risk analyses (FAIR, Monte Carlo simulations) to support governance and decision-making.

• - Aligned identified risks with ISO 27001 control chapters to prioritise actions and strengthen compliance.

• - Authored security policies and control requirements, in accordance with ISO 27001 Annex A and IT transformation initiatives.

• - Participated in ITAC (IT Application Controls) audits, assessing the effectiveness of application controls (data integrity, completeness, and authorization).

• - Contributed to ITGC (IT General Controls) audits, including the review of access management, change management, and IT operations, as well as the follow-up of remediation action plans.

• - Analyzed IT projects based on strategic and operational criteria for integration into the project portfolio.

• - Oversaw budget, teams and delivery of a