Yassine Cherkaoui

Driving the quarterly Azure KRI monitoring cycle across the group's cloud perimeters. Automated the quarterly KRI consolidation process to reduce manual reporting effort. Reviewed privileged access entitlement reports as part of the group PUAM governance cycle. Refreshes and analyzes Power BI dashboards tracking KRI compliance; coordinates findings with TAS Lead and validation teams.

Co-founded a platform for expatriates; leading technical direction and secure-by-design architecture.

Led the Secure SDLC program across 80+ critical applications (onboarding, threat modeling, remediation). Advanced threat modeling with IriusRisk — identified vulnerabilities and defined countermeasures. Owned group-wide DLP strategy on Purview, Trellix and Netskope. Managed EDR via CrowdStrike and performed SAST/DAST/SCA analysis with Fortify and Dependency-Check. Reviewed firewall change requests and performed threat hunting and incident triage using Splunk, IBM QRadar (SIEM) and IBM Resilient as a CTU member. Automated critical security processes using Python and Power Automate.