توفيق سبوح, IT security manager at Ericsson - Algeria

توفيق سبوح

IT security manager at Ericsson - Algeria

Ericsson

البلد
الجزائر - الجزائر
التعليم
دبلوم عالي, sciences
الخبرات
19 years, 7 أشهر

مشاركة سيرتي الذاتية

حظر المستخدم


الخبرة العملية

مجموع سنوات الخبرة :19 years, 7 أشهر

IT security manager at Ericsson - Algeria في Ericsson
  • الجزائر - الجزائر
  • أشغل هذه الوظيفة منذ أبريل 2018

I participated in the implementation of security aspects within Algeria Djezzy-DBSS project and maintain an acceptable level of security based on contractual requirement of the customer, and Ericsson standards and policy.
I manage the integration of a Security incident event management (SIEM) for the DBSS Djezzy - Algeria project (more than 300 assets integrated) and implement the security incident management process.
I coordinate SOC operations, coordinate staff when responding to emergencies and alarms. Reporting on incidents and offences to the COO.
I coordinate the drafting and implementation of
BCM and ISO-27001 deliverable in compliance with Ericsson MSTOP standard.
I coordinate SOX ITGC control and periodic external audit. I drive the corrective action based on the recommendation of audit report.
I manage and secure change and release deployment in respect of Ericsson change management process.

IT Security Manager في HB-Technologies
  • الجزائر - الجزائر
  • أبريل 2012 إلى يونيو 2017

I drive the GSMA-SAS and PCI-DSS certifications obtained by the company in 2016 and 2017. In this context, I participated in the drafting and the implementation of the IT security policy within the company in accordance with the PCI-DSS and GSMA-SAS standards. drafting procedures and guidelines (IT security guideline, IT handbook and the IT policy manual).
I successfully completed the upgrade and progressive renewal of company's aging datacenters. I maintained an acceptable level of IT security according to the recommendations of the security policy of the company.
Planning monthly internal audits and monitoring of remedial actions.
I participate in business continuity plan implementation.
Scheduling monthly vulnerability scans and annual pentests.

IT Manager في Normiso
  • الجزائر - الجزائر
  • أبريل 2011 إلى أبريل 2012

I contributed to the company's efforts to be certified ISO / IEC 17020 by setting up an appropriate information technologies use strategy, by drafting several procedures and manuals, awareness raising and staff training.

I led the project to deploy an IT infrastructure optimized according to the needs of the company, deploying a server (ADDC, file server, print server, ftp server) as well as IT security solutions (deployment of Fortinet firewall and Kaspersky endpoint security business select).

I managed to move forward a project to develop and deploy an ERP, assigned to a third party company; I also managed to write the specifications that will serve as a basis for the completion of the project.

I Managed relations with hardware and software suppliers.

Information technologies project manager في NBED
  • الجزائر - الجزائر
  • سبتمبر 2007 إلى فبراير 2011

I participated in the analysis of complex needs, the drafting of specifications and the proposal of technical solutions for several ambitious projects, among which: salespower (commercial management web solution) and Immogest (real estate management web solution).

I directed and supervised the execution of production tasks according to a project-driven schedule. In addition, I carried out an analysis of the project costs and the necessary resources. My mission was also to prioritize the workload of the team members.

I was chosen by the hierarchy to be part of the committee of wise men.

Application system engineer في Ghzaouet port company
  • الجزائر - وهران
  • يناير 2004 إلى أغسطس 2007

I realized a project of development of a recovery management application (Delphi7 & MySQL), working alone on all the stages of the project (writing of the specs, development, test and deployment).

I realized a project of development of a call management application (Delphi7 & MySQL), working alone on all the stages of the project (writing specs, development, test and deployment).

الخلفية التعليمية

دبلوم عالي, sciences
  • في University of Science and Technology, Oran
  • نوفمبر 2001

Computer science Engineer's degree / Option:Software engineering

Specialties & Skills

IT Security
ISO 27001
Servers
Core Network
IT Management
Project management
Leadership
Team management
PCI-DSS standard
GSMA-SAS Standard
Switchs: Cisco & hp procurve
Linux servers:
Firewall and UTM: Cyberoam, Fortinet & pfsense
Vmware ESXI virtualization
Mrosoft windows servers
Microsoft Hyper-V virtualization
Risk management

اللغات

العربية
اللغة الأم
الانجليزية
متمرّس
الفرنسية
متمرّس

التدريب و الشهادات

course for certified information security manager (CISM) (تدريب)
معهد التدريب:
CYBRARY
تاريخ الدورة:
December 2017
المدة:
8 ساعات