Hamza Dumas

Since December 2014 : Operations Security Manager at Société Générale (Devoteam's assignment) :

- Operational losses collection of the IT Department of Global Banking & Investors Solutions (incidents analysis, identification of remediation actions, incidents reports, action plans follow-up)
- Permanent Supervision (review of anomalies identified by permanent supervision controls and correction follow-up)
- Audit recommandations (follow-up of audit recommandations, support to Managers)
- Risk Control Self Assessment (conducting interviews with Managers to identify their risks and evaluate risk controls)
- Monthly reporting to CIO boards (worldwilde) of operational risk indicators
- Business Continuity Management (Business Impact Analysis, Business Recovery Sites exercises, IT Disaster Recovery exercises)

February 2012 - November 2014 : Support to the ISSO of GDF SUEZ Corporate Line
(Devoteam’s assignment)
- Integrate Security in Projects (from kick-off to go live). More than hundred projects followed per year
- Carry out risk analysis of most critical projects
- Manage security tests on applications (vulnerabilities scan, security test acceptance, pentests, hosting provider audit) : project team coordination (auditors and publisher/hosting provider), audit results presentation, action plan monitoring, etc
- Perform annual ISS Risk Review (conducting interviews with 23 business divisions, reports and risk sheets writing, action plan monitoring)
- Produce ISS dashboards
- Manage 25 ISS Business Correspondents and conduct awareness campaign

September 2011 - January 2012 : Business Continuity Plan implementation for “Groupe Crédit Agricole du Maroc” and Disaster Recovery Plan implementation for “La Poste du Maroc” (Devoteam’s assignment)
- Realized Business Impact Analysis
- Identified disaster scenarios
- Worked out business continuity strategies

May 2011 - August 2011 : Disaster Recovery Plan test realization for Moët Hennessy (Devoteam’s assignment)
- Defined and implemented technical procedures
- Formalized application restart list and identified procedures to evaluate DRP test
- Prepared and monitored DRP test