09/29/2026 updated
20 % partially available
OT/ICS Cybersecurity & Industrial Digitalisation | IEC 62443, NIS2, GxP Data Integrity | 18 yrs
Morocco
Worldwide
Engineering degree, Industrial Computing (Polytech Tours); B.Sc. Industrial Networks (Paris-Saclay)About me
Engineer with 18 years on industrial sites. I secure and modernise plants without stopping production: OT/ICS cybersecurity, IT/OT infrastructure, digital transformation and GxP data integrity. Hands-on, used to working with production, quality, automation and IT teams.
NIS 2ISO 27001Active DirectoryBusiness Continuity and Disaster RecoveryController Development System (CoDeSys)Data IntegrityDomain Name System (DNS)Due DiligenceSupervisory Control and Data Acquisition (SCADA)Incident ManagementIT Risk ManagementNetwork SecurityProject ManagementManufacturing Execution System (MES)Windows Servers
OT/ICS cybersecurity: OT risk assessment and remediation to IEC 62443 (zones, conduits, security levels), NIS2, ISO 27001. Defense-in-depth for legacy OT: network segmentation, firewall rules, secure remote access, endpoint protection, backup, USB and removable media control. Site procedures, BCP/DRP, incident response coordination, audit and inspection readiness, security awareness programmes.
IT/OT convergence and digital transformation: digital maturity assessment, master plans, budget, RACI. Industrial network and server architecture: high availability, VLANs and security zones, core and access switches, fibre, server rooms. Windows Server, Active Directory, DNS, NTP, GPO, VMware ESXi, Hyper-V, NAS, Veeam, Acronis.
Industrial automation: PLC programming Siemens S7 (Step 7, TIA Portal), Schneider (Unity Pro), Wago (CodeSys). HMI and SCADA: WinCC, Vijeo Designer, PcVue, AVEVA Wonderware, Kepware OPC. Protocols: Modbus, Profibus, Profinet, OPC UA, MQTT, BACnet. ISA-95, ISA-88. Serialisation and aggregation on pharma packaging lines, MES and ERP (SAP) integration.
GxP data integrity and validation: 21 CFR Part 11, EU GMP Annex 11, ALCOA+, GAMP 5, computer system validation (CSV). URS, FAT, SAT and IQ/OQ for new machines and systems.
Project management: technical programme management, supplier management, multi-stakeholder projects (IT, OT, maintenance, production, quality).
Industries: pharmaceutical manufacturing and laboratories, aerospace, food. Certifications: PECB NIS 2 Lead Implementer, Cisco CCNA; ISA/IEC 62443, ISA-95, ISA-88 and ISO 27001 training.
Experience
Professional experience10+ years
Freelancer since2019
Languages
ArabicNative speakerEnglishFluentFrenchFluent
Project history
Led the OT cybersecurity remediation programme across several pharmaceutical manufacturing sites: assessment and risk analysis, prioritisation, work plan and execution aligned with international standards (IEC 62443) and group policies.
- Strategic and operational support to site cybersecurity managers for OT, ICS, BMS and IT systems; guidance to manufacturing, engineering, automation, QC laboratories and digital teams.
- Authored site procedures: removable media in OT, business continuity and disaster recovery (BCP/DRP), site security management; contributed to a group-wide security procedure.
- Built in-house tools (Power Apps) to control removable media in OT and to track incidents and threat remediation.
- Integrated cybersecurity into site business continuity plans and risk registers, with consolidated reporting to global leadership.
- Single point of contact for security incidents between the sites and the CISO organisation.
- Prepared sites for cybersecurity audits and regulatory inspections.
- Led the group-wide IT/OT cybersecurity awareness campaign: strategy, multilingual toolkit, instructor-led sessions, workshops and live penetration-testing demonstrations.
Large-scale digital transformation programme to bring manufacturing sites and laboratories to advanced digital maturity through IT/OT convergence.
- Assessed OT assets and infrastructure: connectivity, data integrity and cybersecurity, with detailed inventory and reporting.
- Produced the master plan: milestones, timeline, stakeholders, full budget analysis, RACI and gap-closing strategy.
- Defined the target architecture: high-availability physical network, physical segregation and logical segmentation into security zones and VLANs.
- Delivered server room remediation (cooling, fire protection, access control, power), new racks and fibre cabling; built redundant core networks and servers (backup, virtualisation, NTP).
- Rolled out distribution and access switches; integrated and secured OT equipment into IT services with minimal downtime.
- Deployed OT-adapted security measures: intrusion detection, endpoint protection, remote access, backup, Active Directory.
- Managed milestone budgets, procurement, deliverables and stakeholder communication.
Technical support for OT systems and networks on a pharmaceutical manufacturing site: bug fixes, system and infrastructure improvements.
- Revamped and improved several manufacturing and packaging lines.
- Set up three servers for data storage and system backup, including data migration.
- Data integrity (ALCOA+) compliance of OT systems: NTP time synchronisation, periodic backups, Windows session restrictions, Active Directory domain integration.
- Developed a machine monitoring application to locate failure points and an incremental backup application for critical files to NAS.
- Label printing system connected to SAP for packaging lines.
- CCTV and access management system: needs assessment, GDPR classification, independent architecture, URS and BOM.