Cédric Legout

IT Risk Officer @Societe Generale Corporate and Investment Banking - SGCIB

Puteaux, FR

As IT risk officer, I intervened to set up the IT Risk Management framework and governance for SG group investment banking.To enhance the framework and the risk management of IT processes, I have:• performed 3 risk maturity assessments for the SDM processes (incident, problem, change, release, testing)• collaborated with process owners to write and set up 10 risk scenarios and 20 key risk indicators• pushed to improve the risk coverage (scope of covered assets; management of intrinsic and residual risks) by structuring the onboarding process and the anomalies management.• enriched the corpus of documents (risk register; data collection; data computing; KRI VISA; anomaly management).• developed and automated the data control and integration• ensured a change support related to risk framework evolutions• set up a risk maturity matrix of IT processesTo reduce the IT risk profile of IT Support Units, I have:• advised CIO and Tribe Managers (executive comity) in the steering of the 4 phases of IT risk management: Business impacts identification; Risks analysis; IT risks reporting; Anomalies management and follow up.• reported each month the consolidated risks overview (exposition; evolution) to 3 IT Support Units by producing IT risks synthesis prioritizing remediation to operate• improved the anomalies management operated by the applications managersMission results:• 3 Service Units (with 125 applications, 130 projects, 2200 people, 50 outsourced services) have reached their operationnal key results for the 6 risks assessed• 6 SDM (Service Delivery Manager) processes have reached their targeted risk maturity• Optimization of risks reporting and analysis (provided 2 weeks earlier to improve data freshness)

Institut Universitaire de Technologie - Université de Paris XI - Orsay

DUT (Diplôme Universitaire de Technologie), Spécialité Mesures Physiques

Polytech Paris Sud - Université de Paris XI - Orsay

Ingénieur informatique, Spécialité Electronique et Informatique Industrielle