Votre navigateur est obsolète !

Pour une expériencenet et une sécurité optimale, mettez à jour votre navigateur. Mettre à jour maintenant

×

Julien CHAMPSEIX

Chief Information Security Officer

Veille technologique
Linux
Chef de projet
Monitoring
Réactivité
Julien CHAMPSEIX
42 ans
Permis de conduire
SUCY EN BRIE (94370) France
Situation professionnelle
En poste
Ouvert aux opportunités
Présentation
A technology leader with over 15 years of experience in designing secure and scalable cloud architectures. I have led complex digital transformations that have delivered measurable ROI: a 40% reduction in cloud costs (FinOps), a 60% improvement in time-to-market, and ISO 27001/SOC2 compliance achieved without operational friction.

My philosophy: Security is not a hindrance but a growth accelerator when managed with agility and intelligence (e.g., integrated into product design, ...).

Key achievements:
→ Migration from an on-premises platform to the cloud, incorporating a vision and strong security enhancements
→ Multi-cloud architecture (GCP/AWS) supporting 30M+ users with a 99.99% SLA
→ FinOps strategy that saved €3M annually while doubling capacity
→ DevSecOps framework reducing vulnerabilities by 85% in production
→ Team of 25+ engineers transformed into a center of technical excellence

Expertise: Security Awareness - Cloud Architecture • FinOps • Product Security • Platform Engineering • Team Leadership • Business Strategy

Passionate about building and integrating technology solutions that combine performance, security, and cost-efficiency.

My approach: #LeverageBusiness #BuildSecure #ScaleSmart #LeadWithPurpose
CV réalisé sur DoYouBuzz
  • Act as the primary security contact for enterprise customers, leading security reviews, RFP responses, and trust assessments during sales cycles, then ensuring continuous security engagement throughout the contract lifecycle (audits, questionnaires, incidents, policy updates).
  • Architected unified security strategy across 3 SaaS entities (Cloud, Product, SOC/SIEM/XDR/SOAR) with direct reporting to group management.
  • Deployed zero-trust perimeter with CloudFlare (WaaP, Tunnel, Warp), significantly reducing external attack surface while preserving operational performance.
  • Led ISO 27001:2013→:2022 migration & SOC 2 Type II audit, zero major non-conformities, turning compliance into a business differentiator for enterprise customers.
  • Pioneered an AI Security & Governance framework: Shadow IT/AI detection, EU AI Act alignment, LLM risk assessments (prompt injection, data leakage, model supply chain).
  • Built an internal offensive security programme (OWASP ZAP, BurpSuite, Caido) with recurring pentests, structured vuln management & phishing simulation campaigns.
  • Redesigned identity & device governance with JumpCloud as single control plane for MDM, patch management, Shadow IT detection & asset inventory across all entities.
  • Defined group-wide SBOM strategy and integrated supply chain security into CI/CD pipelines (Github Action(syft/grype)+Dependency-Track+GUAC), bringing dependency risk to the same governance level as infrastructure.
  • NIS2, DORA, EU AI Act & CRA compliance projects, translating legal obligations into actionable controls with board-level reporting to management & investors.
  • Deployed a recurring security awareness programme (role-based training, phishing campaigns) establishing security as a shared organisational reflex across 3 entities.
  • Launched a Digital Protection business unit offering security strategy, architecture assessments & compliance advisory to external customers — opening a new revenue stream for the group.
Description de l'entreprise
Groupe Revevol est composé de 3 entités :