Morad El Moussaoui

Junior IAM Consultant transitioning from IT project management in the banking sector, with hands-on experience in application risk remediation, access governance, and cloud identity management. Skilled in Azure Entra ID, IAM processes, and regulatory compliance. Strong analytical and communication abilities, able to bridge business and technical teams. Actively developing expertise in RBAC, Conditional Access, MFA, and identity lifecycle automation.

IT Project Manager – Cloud Migration & Application Remediation at Groupe BPCE (2024-01 – Present)

Led remediation initiatives for obsolete and unsupported applications, reducing security and identity-related risks. Collaborated with IAM and security teams to align remediation actions with access policies and Zero Trust standards.

• Led remediation initiatives for obsolete and unsupported applications, reducing security and identity-related risks.
• Collaborated with IAM and security teams to align remediation actions with access policies and Zero Trust standards.
• Identified vulnerable systems, assessed risk exposure, and contributed to prioritization based on identity and access impact.
• Supported access cleanup activities and documentation of identity-related risks in legacy systems.
• Coordinated technical teams and ensured secure decommissioning, upgrades, or replacements of legacy applications.
• Maintained documentation on remediation plans, risks, and mitigation actions.

Business Analyst – Banking & IT (IAM & Cloud Projects) at BRED Bank (2023-01 – 2024-12)

Gathered and translated business requirements for IAM and cloud security initiatives. Supported access governance activities, including access reviews and validation of least-privilege principles.

• Gathered and translated business requirements for IAM and cloud security initiatives.
• Supported access governance activities, including access reviews and validation of least-privilege principles.
• Participated in UAT for IAM-related features and ensured compliance with regulatory frameworks (GDPR, KYC/AML).
• Worked with developers, architects, and QA teams to ensure secure and compliant delivery.
• Contributed to documentation of access models, functional specifications, and security controls.

Cloud Engineering Training & Hands-On Implementation at Self-Learning (2025-01 – Present)

Ongoing self-learning and hands-on implementation in cloud engineering and IAM technologies.

• Gathered and translated business requirements for IAM and cloud security initiatives.
• Supported access governance activities, including access reviews and validation of least-privilege principles.
• Participated in UAT for IAM-related features and ensured compliance with regulatory frameworks (GDPR, KYC/AML).
• Worked with developers, architects, and QA teams to ensure secure and compliant delivery.
• Contributed to documentation of access models, functional specifications, and security controls.

Master Degree in Business Management – PPA Business School

Bachelor Degree in Business Economics – University of La Rochelle