Arrolle Ylewo

- Led end-to-end analysis of Level 2 IT security controls reviews, identifying critical anomalies and achieving 100% alignment with Group compliance standards across all assessed domains. - Orchestrated corrective action plan (CAP) monitoring across remediation cycles, reducing average time-to-resolution for security gaps and improving closure rates on high-priority findings. - Hardened IT architecture audit-readiness by validating control execution cycles, reducing exposure to internal and external risks.

- Architected the SOC benchmarking strategy by evaluating SIEM, EDR, and XDR solutions, driving selection of a cost-effective stack that improved threat detection by 70%. - Led Level 2 security operations, resolving high-priority incidents with zero business downtime across all escalated cases. - Delivered regular security reporting and KPI dashboards to senior management, providing real-time visibility into the organization's security posture and enabling data-driven risk decisions.

- Conducted proactive threat monitoring for a high-stakes portfolio of 15+ Tier-1 institutions across Morocco and Africa. - Orchestrated incident response playbooks and malware analysis workflows, resulting in an 80% increase in the efficiency of the incident handling team. - Executed continuous vulnerability management programs (scans & technological watch), mitigating critical exposures within 48 hours of discovery. - Enhanced network observability, achieving 99.9% uptime for critical client connections.

- Spearheaded complex network migrations and micro-segmentation for financial institutions, eliminating single points of failure and hardening critical asset isolation. - Orchestrated the deployment of multi-vendor security stacks (Fortinet, Palo Alto, Cisco) and SIEM/XDR integrations, ensuring 100% compliance with ISMS audit frameworks.

- Optimized the IT infrastructure for the French Institute of Cameroon, maintaining 99.9% availability for 50+ users through proactive firewall and GPO management. - Resolved critical system and network incidents within a 2-hour SLA, ensuring zero business disruption for institutional operations.