Description
Dear Hiring Manager, I am writing to express my interest in the Cyber Security Lead position that you have posted. I am confident that my skills and experience will make me an excellent addition to your team. I have a PhD in Artificial Intelligence and I worked in OT and IT cybersecurity. I am able to solve complex topics, lead projects and lead teams. I have proven track record of success in delivering results in a high-pressure, fast-paced environment. Most recently I worked as an external contractor for a GCHQ cyber accelerator startup in the maritime sector. The challenge of working in a constantly changing and complex environment motivates me. I have a strong desire to learn and grow, and I am always looking for ways to improve my skills and knowledge. I am also a team player and I thrive in collaborative environments. I am confident that I have the skills and experience to be successful in this role. I look forward to discussing this opportunity further with you. Thank you for your time and consideration. Best regards, Dr. Cedric Grimaldi
Education
2015 - 2022
PhD IT- London Metropolitan University
Implementation of a cascading classifier (ANN, SVM, KNN) in MATLAB
20122 - 2022
15+ certifications-
● Certified Information System Auditor (CISA), ISACA
● eLearn Security Web App Penetration tester (eWPT), eLearnSecurity
● Certified ISO 27001 Lead Implementer (CIL), ICSI
● ISO 27001 Certified ISMS Lead Auditor (CIS LA), GASQ
● Certified Threat Intelligence Analyst (C|TIA), EC-Council
● NCSC-Certified Cyber Incident Planning and Response (C|IPR), Cyber Management Alliance
● Certified Open-Source Intelligence (C|OSINT), McAfee Institute
● MCSI Certified OSINT Practitioner (M|OIS), Mossé Cyber Security Institute
● CSI Linux Certified OSINT Analyst (CSIL-COA), Information Warfare Center
● CSI Linux Certified Dark Web Investigator (CSIL-CDWI), Information Warfare Center
● MCSI Certified Cloud Penetration tester (M|CPT), Mossé Cyber Security Institute
● Cloud Security Knowledge (CCSK), CSA
● Certified Cryptocurrency Investigator (CCI), Blockchain Intelligence Group
● Certified Blockchain Security Professional (C|BSP), Blockchain Council
● Certified Computer Hacking Forensic Investigator (C|HFI), EC- Council
● ITILv3, COBIT5, PRINCE2, AgilePM
Work & Experiance
2021 -
Director- Cédric Grimaldi Ltd
Senior Cybersecurity Consultant, CyberOwl, London/Singapore, (GCHQ Cyber Accelerator startup) ● Working with the Chief Security Officer (ex-BAE Systems, Head of Cyber Technical Services) to understand existing proposals, conducting background preparation where needed. ● Provide support on tabletop cyber exercises for an EU client (critical infrastructures). ● Development of a maturity assessment tools and survey for the Singapore Market. ● Assessment of risks and design of monitoring deployment for autonomous vessels (OT/IT maritime systems, Artificial Intelligence) ● Working with the CISO and CTO to review existing procedures and controls, proposing updates where appropriate. ● Working with the sales team to track expected signing dates of proposals. ● Support the implementation of new processes and controls. ● Working with the CISO to develop new consulting propositions. ● Identify any key lessons from consulting projects which could be relevant to others in the company. ● Engage with the Security operations Centre (SOC) and Product teams to feedback relevant insights so the company can improve its products and services. ● Senior Cybersecurity Consultant, Lutessa, Paris, France. ● ISO 27001/NIST Cybersecurity Framework Auditor: Assessment of compliance. Identification of deviations and areas for improvement. Deliverables: Audit report, Audit 360 (Client: Seyna, France). ● ISO 27001/27701 Audit preparation services: Delivery of roadmaps. Review of ISMS/Documentation rewriting support. (Clients: AFDAS, Group 3F, France). ● Technical troubleshooting (EDHEC, Nice, France) ● IT Project Quality Manager, Emineo AG, Nyon, Switzerland. Finance IT/SAP S/4 HANA (Modules FI, CO, SD, QM). Review and approve IT documentation including SAP roles catalogues. ● Cybersecurity Risk Manager, Ypsomed AG, Burgdorf, Switzerland. Development of cybersecurity Risk Management processes/Fault Tree Analysis, STRIDE/PASTA attack trees. Planning and implementation of the cybersecurity risk management process in development projects for medical devices (OT devices).
2017 - 2022
Global IT Quality Consultant (Internal Role), Roche Diagnostics International AG, Rotkreuz, Switzerland- Roche
● Report to program support to the Head of IT. ● Review and approve security risk assessments, data classification reports, security requirements of applications and systems life- cycle documents as part of global projects. ● Ensure timely delivery of global projects, lead others and provide advisory for internal stakeholders. ● Provide support as internal auditor for SOX audits.
2016 - 2017
eCompliance Expert, GlaxosmithKline Plc, Nyon, Switzerland- GSK
● Provide oversight, and guidance in the development and implementation of local systems (IT & OT assets) and processes, including on-going implementation of data integrity technical controls. ● Review and approve IT documents and change requests for all production systems (PLCs, SCADA, Simatic WinCC, Simatic HMI, Plant Intelligence) ● Provide the needed e-Compliance support for the strategic projects, audits and inspections
2014 - 2016
Global IT Project Quality Manager, Novartis AG, Basel, Switzerland- Novartis
● Review and approve systems related IT documents for IT systems in Engineering IT, Finance IT and TechOps IT (SAP, Virtual infrastructure, Oracle Agile PLM, Process Control Systems S7, DeltaV) ● Review and approve security risk assessments. ● Resolve IT compliance inconsistencies.
2001 - 2014
Multiple roles(Software QA Analyst, Project manager, Operational Manager)- Multiple (USA, UK, Switzerland)
Honors & Awards
Honors
2022
PhD with Honors
Professional Skill
Languages
