Nicolas Jacottin
Owner & Senior Cybersecurity, Governance, Risk Management & Compliance Consultant @Apus Consulting Inc
Signup · Get unlimited contacts
WORK HISTORY
Owner & Senior Cybersecurity, Governance, Risk Management & Compliance Consultant @Apus Consulting Inc
CA
Providing IT Security, Governance, Risk Management & Compliance consulting tailored to your organization’s business needs and compliance requirements.Here are a few examples of services that APUS Consulting Inc. provides:• Develop, enhance, communicate and deliver Security, Governance, Risk and Compliance (GRC) program.• Conduct compliance and program gap analysis and develop remediation roadmap• Define IT Security and GRC tactical and strategic roadmap• Provide guidance for developing or enhancing capabilities of an IT security team• Develop business cases for sourcing new technologies and services• Develop requirements, evaluate and select Managed Security Services• Conduct security risk assessment of new IT procurement initiatives and business ventures• Develop the security and compliance requirements for your cloud computing initiatives• Guide organization maturing their IT security, Governance, Risk and Compliance practices• Transform your IT Organization to meet compliance (e.g. PCI, SoX, C-SoX)• Create new policies, standards and processes that make business sense• Develop Information Security Awareness and Training Program• Build Information Security Incident Response and eDiscovery processes• Architect your IT infrastructure environment to manage IT business risks effectively
EDUCATION
INSTITUT SUPERIEUR INDUSTRIEL DE BRUXELLES – Bruxelles, Belgium
Bachelor of Engineering (BEng), Electrical and Electronics Engineering
ABOUT NICOLAS JACOTTIN
A security questionnaire just landed in your Slack. Sales is excited. Engineering is about to burn two days. I\'m the person you call before any of that spirals. Most SaaS teams don\'t have a security problem. They have a decision problem. No one owns what to say, what to build, or what to push back on. So they over-explain, overbuild, or delay — and momentum slows. I define those decisions. I\'ve been on the other side of these reviews. I know which requirements reflect your actual risk to the enterprise — and which ones don\'t apply to your stage. What your answers should say and why they\'ll hold up under scrutiny. What to build now — and what\'s a waste of money at your stage. What to push back on — including whether a specific security requirement is even reasonable to comply with at your stage. Most teams at your stage don\'t need SOC 2 yet. Part of my job is telling you what doesn\'t belong on your roadmap yet. Tools like Vanta and Drata answer the questions. I decide which questions need answering — and which ones you can strategically decline. Who I work with: Series A–B SaaS companies navigating enterprise security reviews, investor diligence, or insurance scrutiny — before they\'re ready for a full-time CISO. What\'s at stake:$100K–$250K in enterprise deal risk. 15–18 hours of engineering time per questionnaire.$30K–$100K in compliance spending that may not be needed yet. How it works: 1–2 weeks,$2K–$4K. No ongoing commitment required to start. We identify what actually matters right now — and and what doesn\'t move the deal forward. Most leaders find the first engagement surfaces decisions they hadn\'t named yet. If that sounds familiar, I\'m easy to reach.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.