François Pageot

Experience

1. Manager, Information Security Grc

   Sound Transit

   May 2022 — Present · Seattle, WA, US

   Leading the team responsible for the agency’s Information Security Risk Management and Vendor Risk Management Programs• Implementing Cyber Risk Quantification (FAIR) at the agency, and incorporating risk quantification into the Information Security Management Program governance• Driving security risk mitigation efforts and managing risk treatment plans with IT, OT and business stakeholders across the agency• Maintaining the agency’s Information Security risk register and co-managing the security policy exception process• Managing third-party risk assessment and monitoring processes (including SOC 2, ISO 27001, PCI, CSA), as part of the Vendor Risk Management Program• Reporting and escalating security risk findings, recommendations and mitigation status to executive management and enterprise risk management • Participating in Information Security standards, procedures, and guidelines creation• Assisting with agency audit/compliance, security awareness, and data classification/governance efforts

Education

• IÉSEG School of Management

  Master of Science (MSc), Management Information Systems, General

  2010 — 2015

• Koç University

  Exchange program in Istanbul (2012-2013), Business Administration and Management, General

  2012 — 2013