Samir KADI | IT Risk Analyst & Cybersecurity Specialist

About

I combine a banking background in factoring, fraud and compliance with hands-on cybersecurity and IT risk. At BNP Paribas I design permanent controls, run RCSA campaigns and strengthen operational resilience under DORA and French regulation.

Outside work I run a 9-node Raspberry Pi laboratory, practise daily on TryHackMe and HackTheBox, and shoot street, landscape and event photography. I am relocating to London for the next step in my career.

Now: IT Risk Analyst, BNP Paribas
Next: London & UK, 2026
Focus: RCSA · GRC · DORA · BCP
Lab: 9× Raspberry Pi 4 cluster

Experience

Jun 2024 — Present

IT Risk Analyst

BNP Paribas Bank, Montreuil

Permanent Control & RCSA: spearheaded the permanent IT control framework (2nd line) for the Asset Management (OPC) entity.
Incident & remediation: root-cause analysis and end-to-end ownership of corrective action plans.
Compliance & strategy: alignment with EBA / ACPR and emerging technology risk.
Third-party risk, BCP / DR, and IT risk training across the organisation.

May 2023 — May 2024

Cybersecurity Mission Manager

BNP Paribas Bank

End-to-end cybersecurity missions and post-mission reporting.
Risk assessments, mitigation, stakeholder reporting.

Sep 2022 — Apr 2023

IT Security Administrator

Easy Former, Cergy

Security plans, tooling, IAM, BCP / DR support.

Jun 2016 — Apr 2022

Factoring Sales Manager

BNP Paribas Factor, Paris

Revenue growth, portfolio expansion, long-term client partnerships.

Show 8 earlier roles (1997–2016)

Store Manager

KADI SERVICES

1997 — 1999

Stock & Sales Assistant

MANGO

2003 — 2005

Debt Collection Officer

GDF

2005 — 2008

Factoring Operations Officer

EDF

2008 — 2009

Insurance Underwriting Assistant

MMA IARD

2009 — 2012

Premium Collection Officer

Bpifrance

2013 — 2014

Compliance Officer

CréditPar

2015

Card Fraud Operations Analyst

Boursorama

2015 — 2016

Education & certifications

2022

Master’s in Cybersecurity & Information Systems

University — Graduated with Distinction

Network security, risk-management frameworks, auditing, GRC and SOC practice.

2016

MSc Economics & Finance

University — Master of Science

Corporate and market finance, quantitative methods, strategic analysis.

Key certifications

ISO 27001 Lead Implementer · 2024 CompTIA Security+ · 2023 CEH · 2023 Cybersecurity Analyst (competence certificate)

Professional projects

2024 — Present

ICT Risk & Permanent Control

OPC LoD1 — Factor France

End-to-end ownership of the IT permanent-control framework and bi-annual RCSA campaigns.

RCSADORAServiceNow

2024

Akamai Anti-DDoS

In collaboration with Akamai

Production rollout of Kona Site Defender. 1.2 Tbps DDoS mitigated.

AkamaiWAFSOC

2024

CAR Light — BCP

Led at Factor France

Annual continuity exercise, 80+ participants, recovery time −40%.

BCPISO 22301

2023

GAP 05

Continuous-improvement programme

Regulatory and security gap analysis with a tracked remediation roadmap.

2022

Secure Infrastructure Lab

Internship — end-to-end

PfSense, Snort IDS/IPS, Squid/SquidGuard, captive portal.

Cyber lab

9 × Raspberry Pi 4

Kubernetes-ready cluster

Distributed IDS/IPS, WireGuard zero-trust, Wazuh SIEM, Cowrie honeypots, Pi-hole, OpenVAS and continuous monitoring.

Pi-holeDNS / gateway

WazuhSIEM

SuricataIDS / IPS

WireGuardZero-trust VPN

CowrieHoneypot

OpenVASVuln scan

NextcloudSecure share

k3sOrchestration

KaliAttack sim

Photography & life

Nuit Blanche, Paris — Nuit BlancheParis, 2024–2025

Platform progress

TryHackMe

Top 5% · 420+ points · 207 rooms · 472-day streak

HackTheBox

Pro Hacker · 1,850+ points · 45+ machines

Other platforms

PortSwigger 100% Web Security
OverTheWire Bandit + Natas
Root-Me Top 10% France

Hello, I’m
Samir KADI