Meet Sylvan.
Sylvan Ravinet is CISO at Eres, an asset management and financial services company based in Paris. He has spent over twenty years securing regulated businesses: retail banking architecture, group-wide compliance programmes at Société Générale, and the CISO role at Lydia. He writes and speaks on what it takes to trust systems that increasingly run themselves. That work also covers operational resilience and the regulatory weight of DORA, GDPR and NYDFS. He has spoken at AWS AI Day, HackInParis and Dauphine University. He advises tech executives and business managers on security and AI decisions that hold up under scrutiny.
As a member of CESIN, he leads two joint workstreams with the Innovation Makers Alliance: using AI to accelerate detection and response, and agentic cyber mesh architectures. Publication is scheduled for December 2026.
CISO
Senior Advisor
Speaker
Editor
Husband
Dad of Two Kids
Chief Information Security Officer
Eres (September 2025 - Present)
Leading the security function of an asset management and financial services company, covering regulatory compliance, operational resilience and the secure adoption of AI systems.
Achievements:
- Set the cybersecurity strategy from a full posture assessment, and stood up a group-wide cybersecurity committee to own it.
- Cut mean time to acknowledge from days to minutes, and mean time to resolve from weeks to hours, by resetting how the SOC provider is managed.
- Delivered the DORA programme: a new programme committee, AMF reporting, maturity assessments with a live dashboard, and 80 normative documents produced or rewritten.
- As BCP manager, reprioritised the disaster recovery plan, reviewed its architecture, and led business continuity exercises.
- Turned security by design from a standard into weekly sweeps, owned by the developers and maintainers of around 200 code repositories.
- Mandated penetration tests and technical audits, and coached infrastructure and development teams through remediation.
- Brought AI risk under control: co-authored the AI policy, vetted a cloud-based AI orchestrator for production use, established shadow-AI detection, and secured AI-assisted coding.
- Put third-party risk on a repeatable footing, with structured due diligence and vendor vetting.
CTO and Applied AI Researcher
Captain Team (April 2025 - August 2025)
Led research and development on secure AI and AI-enabled security operations.
Chief Information Security Officer
Lydia (September 2024 - March 2025)
Led security for a consumer fintech operating at scale under financial-services regulation.
Director of Cybersecurity Programs
Société Générale (October 2022 - August 2024)
Providing strategic leadership to enhance cybersecurity posture for regulatory compliance.
Achievements:
- Governance: Reactivated the cyber compliance community, updated security controls for GDPR, accounting and critical applications, enhanced compliance coverage, reviewed the security by design standard.
- GDPR: Finalized the remediation for 500+ applications, transitioned 2500+ applications to RUN.
- ABC: Completed security remediation for 150 accounting applications, prepared RUN with Finance for 40 more apps.
- DORA: Reviewed compliance requirements, participated in gap analysis, framed compliance plans.
Regional Sales Director and Country Lead
BlueVoyant (March 2022 - August 2022)
Interim executive management, defining and executing GTM strategy, optimizing outbound and email sequences, developing local channel partners, and aligning key narratives with digital sovereignty themes.
Achievements:
- Won new logos.
- Developed strategic sales opportunities with CAC40 companies.
- Onboarded the Swiss JV within France GTM.
- Spoke at key events.
Notable Past Roles
Co-Founder
CaptainCyber (February 2020 - February 2022)
Developed a platform to engage employees in cybersecurity, providing daily news, quick training, personal cybersecurity coaching, and crisis resolution alerts.
Practice Director, Cybersecurity, France
Wipro Limited (April 2018 - January 2020)
Advised CISOs and CIOs on cybersecurity strategies and managed security services.
Editorial Director:
Cyberbrief (March 2018 - January 2020)
Led a media house dedicated to digital and cybersecurity, providing weekly editorial newsletters.
Early Career
IT Security Architect:
Société Générale (September 2002 - May 2004)
Designed application architectures and security protocols for retail banking intranet systems.
Program and Project Management
Regulatory Compliance
Fraud Prevention
Operational Resilience
Cybersecurity Risks
GDPR, NYDFS, DORA Compliance
Strategic Leadership
Training
Public Speaking
Information Security
Coaching
Security Awareness
Human Resources
Sylvan Ravinet is CISO at Eres, an asset management and financial services company based in Paris. He has spent over twenty years securing regulated businesses: retail banking architecture, group-wide compliance programmes at Société Générale, and the CISO role at Lydia. He writes and speaks on what it takes to trust systems that increasingly run themselves. That work also covers operational resilience and the regulatory weight of DORA, GDPR and NYDFS. He has spoken at AWS AI Day, HackInParis and Dauphine University. He advises tech executives and business managers on security and AI decisions that hold up under scrutiny.
As a member of CESIN, he leads two joint workstreams with the Innovation Makers Alliance: using AI to accelerate detection and response, and agentic cyber mesh architectures. Publication is scheduled for December 2026.
