Nicolas Andreu, ARM, CISSP, CRISC, CCSP

Nicolas Andreu, ARM, CISSP, CRISC, CCSP

Group CISO | RSSI Groupe

Coface•Rueil-Malmaison, Île-de-France, France

View LinkedIn Profile
Experience27+ Years
LevelCXO

Executive Overview

Group CISO | >20 Years in Cybersecurity Risk Leadership & AI Governance | Building Group-wide Cyber Resilience & Governance | Insurance & Financial ServicesI build and lead Group-wide cybersecurity risk programmes, from Risk Assessment frameworks to DORA compliance and Cyber Resilience capabilities, within a Three Lines of Defence model.

Career Timeline

Professional employment history
  • CofaceCurrent
    2018–Present· 8 yrs 10 mos
    • Chief Information Security Officer, GroupCurrent
      2018–Present
  • 2015–2018· 3 yrs
    • Head Of Information Security & Risk Transversal Mission
      2015–2018
  • 2011–2014· 3 yrs
    • Team Leader Group Global Security & Risk
      2011–2014
  • 2009–2011· 2 yrs
    • Practice leader Security & Risk Management
      2009–2011
  • 2005–2009· 4 yrs
    • Senior Security & Risk Management Consultant
      2005–2009
  • 2001–2005· 4 yrs
    • Security consultant
      2001–2005
  • 2000–2001· 1 yr
    • Project leader (stock market)
      2000–2001
  • 1999–2000· 1 yr
    • Expert, IT Security
      1999–2000

Education

Associate in Risk Management (ARM 54,55,56)

Entreprise Risk Management (ERM)

The Institutes

Master 2 (M2)

IT Systems & Networks

UVSQ Université de Versailles Saint-Quentin-en-Yvelines

Executive Relationship Map

Reports To
Nicolas Andreu, ARM, CISSP, CRISC, CCSP
Vice Chair & President
Chief Financial Officer
Chief Technology Officer
Chief Operating Officer

Executive Network Preview

BizKonnect has mapped this leadership network including reporting hierarchies, peer connections, and cross-functional relationships.

Verified Contact Information
Email & Direct Dial
Org Chart & Reporting Lines
Buying Committee Insights
AI-Powered Account Mapping

Skills & Expertise

21 of 21 skills
Cloud application securityDORACloud OperationsVeille réglementaireGestion des risques liés aux tiers (TPRM)Stratégie ITGestion de crisePolitiques et procéduresArchitecture cloud-nativeGouvernance de la sécurité des informationsRisques de cybersécuritéCloud Platform SecurityGouvernance de projetCliud Design SecurityCloud Data SecurityGouvernance du cloudSituations de criseCloud Legal RequirementGestion des cyber-risquesIntelligence artificielle (IA)Cloud compliant requirement