Abdenour Itou

As a Senior Compliance Officer, I was responsible for:
- Internal Audit Execution: Preparing and executing comprehensive internal audit activities to evaluate risk management and operational controls within the Government Electronic Certification Authority (AGCE) .
- External Audit Management: Facilitating and actively participating in external audit engagements to ensure full organizational transparency and regulatory alignment .
- Framework & Procedure Development: Contributing to the formulation, maintenance, and enhancement of internal audit procedures and governance frameworks, ensuring strict adherence to information security policies, electronic certification standards, and external legal regulations .
-Trust Services Oversight: Conducting specialized compliance audits of trusted third-party entities (tiers de confiance) to validate their adherence to secure electronic certification standards .
- Cross-Functional Collaboration: Partnering with diverse organizational structures and internal departments to provide compliance guidance and resolve complex operational matters related to the agency's mandate .

• Conducting in-depth audits of IT systems, processes, and internal controls.
• Performing IT General Controls (ITGC).
• Performing IT Automated Controls (ITAC).
• Conducting IPE (Information Provided by Entity).
• Identifying potential risks related to IT systems, applications, and data.
• Formulating recommendations to mitigate identified risks and improve control effectiveness.
• Assessing compliance with regulatory standards, internal policies, and best practices in IT security.
• Examining security controls, including authentication, authorization, access management, and data
protection.
• Performing penetration testing and attack simulations to evaluate the resilience of IT systems against
threats.
• Conducting risk assessments and security impact analyses to identify critical vulnerabilities.
• Preparing detailed audit reports including conclusions, recommendations, and corrective action
plans.
• Collaborating closely with IT teams and management to implement audit recommendations.
• Providing advice and expertise on IT security and governance to internal stakeholders.
• Maintaining up-to-date expertise on emerging trends, standards, and technologies in IT security.

• Implemented an IT asset management application, GLPI.
• Provided technical assistance to departments regarding the use of implemented IT applications.
• Coordinated the monitoring and maintenance activities of IT equipment and networks.
• Provided user support.
• Managed and tracked IT assets.
• Purchased, configured, parameterized, and assigned IT hardware.
• Estimated timelines and costs for interventions and prepared quotes.
• Provided training on the use of office equipment or IT systems.
• Diagnosed remote IT software or hardware malfunctions.
• Configured workstations according to the companys standard configuration and assigned PCs,
laptops, and printers.
• Network cabling, repair, maintenance, and installation of the IT network.
• Monitored the migration of PCs and laptops.
• Monitored internet connectivity from ISP providers.