Experience.
The roles, and what changed because of them.
The path
CTPO & CISO
Nestor · Secure exchanges for regulated organisations, ex-Paprwork
May 2026 – Present
Lille, remote
Added the security function to the product and tech leadership role: governance, certification and risk, on top of vision and delivery.
- Run the platform in production for about 60 client organisations in retail, banking, finance and law: close to 8,000 admins and guests, 10,000 secure spaces and some 400 GB of confidential files exchanged between organisations.
- Led the ISO 27001 certification programme end to end, from gap analysis to audit, in 2026.
- Ran a white-box penetration test of the platform, then a remediation programme across authorisation, tenant isolation, rate limiting and input handling.
- Set up the security governance: risk register, policies, controls, evidence and supplier reviews.
- Answered customer security questionnaires and due diligences for enterprise and regulated clients.
- ISO 27001
- Pentest
- Security governance
- Risk management
- Leadership
CTPO
Nestor · Secure collection of sensitive documents and data, ex-Paprwork
Jan 2024 – May 2026
Lille, remote
Owned product and engineering for the company, from customer needs to a shipped roadmap.
- Turned customer needs into a product vision and a roadmap the whole company could execute against.
- Led a team of 10, including 4 engineers, through the scale-up phase.
- Grew a multi-tenant B2B platform: secure document collection, data rooms, e-signature and video conferencing, on NestJS, Next.js, PostgreSQL and Kubernetes.
- Moved identity to Keycloak with enterprise SSO (OIDC, SAML) and passkeys, branded per organisation.
- Cut the API delivery pipeline from about fifty minutes to sixteen, on two self-hosted runners.
- Owned architecture, delivery process, vendors and the tech budget.
- Product strategy
- Engineering management
- NestJS
- Next.js
- Kubernetes
- Keycloak
Full-stack developer
Paprwork · Compliance and cybersecurity software, became Nestor in 2023
May 2021 – Jan 2024
Lille
Built compliance and security features end to end, close to customers and auditors.
- Shipped core product features across the stack, from data model to interface, first on Ruby on Rails and React, then on Angular and React with TypeScript.
- Took part in the spin-off of Nestor from Paprwork in early 2023.
- Learned the audit and certification world from the inside, working with compliance teams.
- Ruby on Rails
- React
- Angular
- TypeScript
- Compliance
Full-stack developer
Dividom · Regulated real-estate investment platform
Feb 2016 – Apr 2021
Lille
Five years as a product engineer on a Ruby on Rails platform for real-estate investors, distributors and back office. Joined as an intern in February 2016, hired permanently in September.
- Built and maintained a Rails and PostgreSQL monolith serving seven sub-applications: investor app, distributor CRM, supplier extranet, admin back office and public site.
- Shipped the AngularJS single-page apps for investors and distributors, including tax-relief simulators covering fourteen French schemes.
- Implemented regulated flows: KYC and suitability tests, crowdfunding subscriptions, Yousign e-signature, PDF contract generation.
- Ran the supporting services: Sidekiq jobs, S3 uploads, Algolia search, transactional email, web push and PWA.
- Ruby on Rails
- PostgreSQL
- AngularJS
- Sidekiq
- Proptech