Emmanuel KHAN

Deloitte.
Manager - IT Risk & Governance

Gateway Building, Brussel Airport, Zaventem, Flemish Brabant, Belgium

September 2015 – Today

Manager - Risk Advisory - IT Risk Consulting

As an IT Risk & Governance Manager, Emmanuel participated in several projects in the IT Risk spectrum. This included:

• IT processes and controls audit with focus in the following topics:
  • Change management
  • Patch management
  • Information Security (Identity and Access management, Segregation of duty, Privileged accesses, Security configurations)
  • Backups and recovery management
  • Batch job management
  • Physical access and datacenter security
• Mission to assess, evaluate, strengthen and update for compliance the above IT processes, for SOX and not SOX client:
  • Elaboration of remediation action plan in order to update the IT processes and controls to current standards of security and compliance
  • Elaboration of mitigation action plan in order to mitigate IT risks during a financial audit
• Audit and project management
  • IT audit scoping
    • Assessment of risk arising from business activities
    • Understanding of IT environment and assessment of IT risk inherent to IT landscape
    • Development of the audit plan (List of controls relevant for audit regarding the IT risks)
  • Elaboration and follow-up of budget
  • Definition of the audit approach
  • Assessment of IT observations and associated risks materiality
  • Assessment (Client SOX)/Elaboration (Client not SOX) et follow-up of remediation and mitigation plans
  • Management of small teams (3 to 5 consultants per project) to perform the audit
• Various technology audit:
  • Applications
    • SAP (ERP)
    • SAP satellites applications (BI/BW, SRM, CRM, HR, GRC, Solution Manager)
    • Baan (ERP)
    • BPCS (Business Planning and Control System)
    • Infinium (Financial management, materials management and human capital management)
    • J.D. Edwards Enterprise One (ERP)
    • Microsoft Dynamics GP (ERP)
    • SAGE 100 (Accounting software)
  • Databases
    • Microsoft SQL
    • Oracle
    • DB2
    • HANA
  • Operating systems
    • Windows Server
    • OS400
    • HP-UX
    • SUSE
    • Active directory (Windows LDAP)
• Segregation of duties (SOD) audit
• Data analytics - In-house developed tool Dfact (Deloitte Fast Audit Control Testing)

Principaux clients:

CODiLOG - ERDF
Assistant SAP Project manager

Nanterre, Île-de-France, France

February 2015 – August 2015

End-of-studies internship - Functional program validation team

Support for the management of a SAP functional program validation team: The COSY project, the customer information system of ERDF, covers functions from billing statement to the billing itself of customers said "C1 - C4". These customers account for a third of ERDF's sales or about 5 billion euros, but covers only 1.35% of the company's clients.

• Industrialisation of management tools : Workload planning and monitoring tools, activity monitoring tool
• Put up activity monitoring indicators and reporting
• Daily monitoring of the activity and deliveries
• Create a procedure to industrialize the use of tools of the activity
• Create a procedure for external loads to the activity
• Create a SharePoint "Fil info" to monitor the activity in real time

Johnson & Johnson
Assistant SalesForce Application Technical manager

Issy-les-moulineaux, Île-de-France, France

August 2012 – January 2013

6 month internship - Team "Center of Excellence" of Europe

Monitoring of an existing project : The software FDV EasyTrade is used by JnJ's salesforce and it is developed by Coheris. Monitoring is done according to the ITIL process with Incident management, change management and user management. I also had to ensure that all processes were SOX compliant.

• Preparation and monitoring of SFA releases and in charge of the communication with internal technical teams and global salesforce's representative in Europe
• Monitoring of all SFA activity at European level and in charge of the establishment of a suitable decision reporting
• Improvement of a Client SharePoint
• Create a SharePoint for the change management

ITIL® (2011) Foundation

APMG-International

January 2016

TOEIC®

EPITA school

2012

860 points

EPITA - Graduate School of Computer Science and Advanced Technologies

Le Kremlin-Bicètre, île-de-France, France

2009 – 2015

Major : Computing Engineering for Real-time and Embedded Systems
Minor : Business Intelligence (Analyze/Dimension/Influence)
Engineering school that deliver a degree in Computer science and the title of Engineer.

Main courses:

• Low-level programming (Kernel and System)
• Embbebed programmation
• Robotics - Automation
• Project Management

Stellenbosch University

Stellenbosch, South Africa

January 2011 – June 2011

EPITA international exchange program.

Main courses :

• Electronics
• System Architecture
• Mathematics
• Algorithms

Jacques Monod High-School

Clamart, île-de-France, France

2008

Baccalauréat in science (French high-school degree)

Languages

• French : Native language
• English : Advanced
  TOEIC : 860

Hobbies

• Computer science
• Music : Guitar
• Travel
• Automotive

AlgoDream

C#, Microsoft XNA

Project of the first year in EPITA. We had to develop a video games with a four people team. AlgoDream is platform game in 2D where the hero seek for the "light". We used the XNA framework which facilitates video game development and management in C#.

VirgoTerris

Ocaml

Project where we had to develop a software in Ocaml which generates a 3D map based on a given simple topographic map. Project of the second year of the school.

Projects of the first year of engineering

C, C++, JAVA

Project in C

Individual project of the first semester. We had one week or less to realise them :

• Libc : rewrite of some libc's function (libstring, libstream, myprintf, fnmatch, malloc)
• MyReadIso : Program that can read an ISO
• Find : rewrite find program
• myHTTPd : multi-thread HTTP server

Project "Rush" : Video game
Project to realise in 36 hours with a team of 3. The goal was to make a "R-type like" : that means a horizontal scrolling shot game.

Project of the end of C cycle : 42sh
Implementation of a POSIX shell C in a month by a team of 4. The shell follows the SCL.

Project in C++

Game of life
Individual project realised in two weeks which is a Conway's Game of Life. We used UML for the conception.

Tiger
Implementation of a compiler for the language Tiger. Project that overview all the component of a compiler : we had to create a lexer, a parser then to build an AST and finally transform the AST into machine code.

Chess
First we used UML for the conception of the board. Then we implemented a program that can manage a chess board, its pieces and their movement. Finally we implemented a simple artificial intelligence that can calculate few movements.

Project in JAVA

Survivor and Gladiator
Implementation of a RMI server and a client.

MyPhotoshop
Implementation of a photoshop like, with a lot less functionality. Allows the application of filters and drawing on picture.

Yakaérien
Management platform for an airport. It can handle parkings, planes and air Traffic Controller. For that, the software used a database. We used Struts and Hibernate framework for that. Realization of a set of functional specifications and a list of tests.

Kaneton

C

Realization of a flexible and secure microkernel in C. For more information : Kaneton

Linux USB driver

C

Implement a USB driver for following device : Webmail Notifier
The goal was to develop a Linux pilot for the device. It allows to control the brightness of the notifier and make it blink with a ioctl call.

BSP

C

Use of buildroot to realise a Linux BSP for a Raspberry Pi and for a Armadeus card.

FPGA and LCD screen with I2C

VHDL

Configuring an FPGA to control a 2-line LCD screen with the I2C protocol.

Final project : Augmented reality glasses

C++

Creating augmented reality glasses with:

• Digital glasses : Vuzix 920AR
• A raspberry Pi
• OpenCV

This project has a strong hardware constraint, the raspberry Pi is not very powerful and has few resources to do image processing. The project is to optimize these processes to have an acceptable latency. After submitting a project plan to the school, the project was funded and monitored by the school with steering committees every month.