The Lift, episode 7: from Consultant to Head of Governance, Risk and Compliance with Violaine Guichard

TLTR

• From consultant to Head of Governance, Risk and Compliance: Violaine Guichard joined in 2016 as a Consultant Manager and today leads the Governance, Risk and Compliance practice for Consulting at Orange Cyberdefense France; 
• A career path built through opportunities: GDPR, management and strategic topics have gradually broadened her expertise and responsibilities, supported by nine months of communication coaching;  
• She was bold enough to develop her career: for Violaine and her grand-manager, Anne Burkhardt, you need to voice your ambitions and demonstrate what you can do; 
• An environment that opens up possibilities: varied roles, geographical mobility, cross-functional career paths and a community of 3 300 experts all create opportunities for professional development. 

“The Lift”: meet Violaine Guichard, whose career progression in cybersecurity consulting at Orange Cyberdefense France is shaped by boldness

Can you build an ambitious career without compromising your convictions or your personal balance? In this new episode of “The Lift”, Violaine Guichard talks about her progression from consultant to Head of Governance, Risk and Compliance at Orange Cyberdefense France. Together with her Anne Burkhardt, whom she calls her role model within the company, she shares the factors behind her professional development: standing by her convictions, seizing opportunities, developing her expertise and willing to take on responsibility.

The Lift: The floor is yours

At Orange Cyberdefense, boldness pays off. With capability and motivation, growth is possible shares Violaine Guichard, Head of Governance, Risks and Compliance, Orange Cyberdefense France.

When did your paths cross? In what context?

Violaine Guichard, Head of Governance, Risk and Compliance at Orange Cyberdefense France: “I first met Anne during an event dedicated to the merging and creation of the Consulting and Audit team. He role was Operations Director at the time and spoke about her ambition to create greater synergy between people from very different backgrounds. I had followed a fairly traditional path as a cybersecurity consultant. I admired the fact that Anne had built a successful career without giving up her personal life, and had sustained that balance over time. I had never seen that anywhere else. In my previous consulting roles, women were mainly represented in support functions. Here, I was seeing a woman in a senior leadership position. Role models matter.” 

Anne Burkhardt, Consulting and Audit Director at Orange Cyberdefense France: “It’s worth remembering that in the early days of Orange Cyberdefense, there were relatively few women overall, and particularly in the Consulting team. I remember Violaine in the open-plan office: she had a strong character and a real presence. She already had the energy, enthusiasm and tenacity that immediately made her stand out.” 

When you joined Orange Cyberdefense, what was your skillset and what did you learn?

Violaine Guichard: “I knew how to carry out audits, risks analysis and other GRC missions. At Orange Cyberdefense, I discovered large-scale, multi-million-euro projects conducted along Orange Business, demanding clients and genuine project leadership. Working with every type of client, from Non-Governemental organizations to major international companies and public sector administrations is fantastic. I don’t know any other company with such a broad client base. I also discovered what it meant to work for the Orange brand. When I worked at a start-up, there were thirteen of us and we had to work hard just to get clients interested. Here, we can work with organisations of every kind, in an intellectually stimulating environment.” 

What has been your career evolution at Orange Cyberdefense?

Violaine Guichard : “After graduating from engineering school in 2008, I joined EY, one of the Big Four, working in IT audit before specialising in security at the consulting firms Beijaflore and Formind. I joined Orange Cyberdefense in 2016 as a Consultant Manager in governance and regulatory compliance, where I worked in particular on GDPR, the General Data Protection Regulation. I’ve had strong opportunities to progress, and since the beginning of 2025 I have been appointed Head of Governance, Risk and Compliance in the Consulting team at Orange Cyberdefense France.” 

Anne Burkhardt: “Career progression is encouraged here. I started at Orange group, then moved to Orange Business before joining Orange Cyberdefense at the end of 2015. It was still a small company then, and I was one of the early employees. My role was multidisciplinary, covering part of the Business Units as well as all cross-functional activities and support functions. In mid-2016, following the acquisition of another company, I created the Business Unit dedicated to Consulting, bringing together teams from three different units. Like Violaine, I’m also proof that there are many possibilities within the Group.” 

What learning and development opportunities have helped you hone your senior-level expertise at Orange Cyberdefense?

Violaine Guichard: “When I joined in, new managers received two weeks of training, so our onboarding was really solid. I also benefited from communication coaching to develop that skill. When the coaching was first suggested, I was a little offended! I didn’t think I needed it. But over the course of those nine months, I saw how much progress I was making and how fortunate I was: at Orange Cyberdefense, when management sees that someone is struggling with a particular area, support is offered, backed by a very extensive training catalogue. I was given the opportunity to improve. As an example, I took a module on managing difficult personalities because I was managing some challenging Consultants. The training was a real wake-up call: I realised how much I needed it.” 

What role has Anne played in your professional development?

Violaine Guichard:“Anne has been a role model for me. She holds senior positions that require her to make decisions, stand her ground and defend her teams. Being able to sustain that level of responsibility over time is genuinely inspiring to me. With Anne, I can progress with complete confidence: I know I can think outside the box and push boundaries, as long as I can show that the business case is there. That’s a very positive environment to work in. I’m also fortunate to take part in some strategic committees. It’s fascinating to see how senior management asks the right questions and approaches decisions without preconceptions. The experience is very stimulating.” 

How do you breathe Orange Cyberdefense's Hacking spirit?

The "Hacking spirit" is a balance between conviction and intuition, says Violaine.

What hard skills and soft skills immediately standed out with Violaine?

Anne Burkhardt: “I really noticed Violaine’s strengths when GDPR came in. She put her hand up to take ownership of the topic. This was in 2018. She approached it with a great deal of enthusiasm, rigour and professionalism. It was still a relatively new subject and, for a highly technical company like ours, looking at the impact of regulation on deployment helped us stand out. Law firms and the Big Four ⁽¹⁾ consultancies were all moving into GDPR; thanks to Violaine, we made the move at the right time. I saw that she took ownership of innovative topics, challenged us, recruited new profiles and trained colleagues. I also noticed that clients came back and specifically asked to work with Violaine. My first impressions have never been disproved: I know she will dig deeply into a subject and, if she doesn’t have the expertise, she will go and find it. I also appreciate her direct, honest, sometimes blunt style: if Violaine has something to say, she’ll say it in a crystal clear! I’ve seen her mature by changing the way she positions herself.” 

Violaine Guichard: “I have made an effort on the bluntness, to be fair!” 

What is your shared vision regarding career development opportunities at Orange Cyberdefense?

Violaine Guichard:“A manager can’t read our minds. You have to be willing to say what you want to do. That doesn’t necessarily mean asking for a specific role; it can mean saying you want to work on particular themes or topics. My own role was tailor-made for me! At Orange Cyberdefense, there are a lot of possibilities when it comes to career paths. But you have to get moving, take action and prove yourself. Managers aren’t there to hold your hand!” 

Anne Burkhardt: “When we recruit, we set out development paths for our people. Someone joining the Consulting team knows clearly which skills are expected to progress from junior to experienced Consultant. Beyond that progression over time, we also have cross-functional topics. As part of our company strategy, we give time and resources to people who want to develop high-impact subjects. That means many experts within the consulting community wear several hats. You can be a consultant in Lyon, own an offering and work on a biomedicine topic because it interests you. And consulting isn’t the only option: several people from our team have moved into other parts of Orange Cyberdefense. The bridges and career paths exist. There is also geographical mobility. After Covid, many employees wanted to live in other parts of France. In response, we created teams in a number of cities. Younger generations often want to progress quickly and can feel that staying more than three years in one company means stagnating. But professional growth takes time. If you feel good in a company that gives you resources, trust and cross-functional opportunities, why move simply for the sake of moving? As managers, it’s our responsibility to make sure younger colleagues don’t get bored, that they can see the possibilities ahead and continue to growand thrive.” 

And how do you see our company culture, the well-known “Hacking spirit”? How do you experience it day to day?

Anne Burkhardt:“I would say you need boldness and curiosity, you need to enjoy challenges and be willing to try. Orange Cyberdefense’s DNA is about testing the resilience of clients’ systems. It is also a broader mindset: never standing still, constantly questioning yourself, investigating and trying new ways to solve problems. And we are a community of 3 300 multidisciplinary experts. That is a real strength because you are never alone when you face a subject.” 

Violaine Guichard:“In Consulting, the "Hacking Spirit" means being quick to spot opportunities around emerging topics, particularly regulatory ones, adapting constantly and demonstrating our expertise. We work in a very stimulating environment. It is a balance between conviction and intuition. Listening to clients is also part of that mindset.” 

Do you have an anecdote to share, a piece of advice that stayed with you, or something you’ve never dared to say before?

Violaine Guichard:“I stand by what I said: Anne is my role model! For someone who didn’t come from cybersecurity, I’ve been really impressed by her ability to get to grips with highly complex topics.” 

Anne Burkhardt:“I’ve been at Orange Cyberdefense for ten years, and I graduated from business school. When I speak to younger people and women in our company, I tell them about the possibilities they can fully embrace here. The point is less about mastering everything, but to know how to surround yourself with the right people.” 

Artificial intelligence is rapidly advancing in cybersecurity: is it already impacting your work?

Violaine Guichard:“AI is revolutionising the way attackers work, and we are adapting to it. It is also changing the way we produce our work. Clients expect prices to come down as a result of artificial intelligence. At our level, it is a small revolution.” 

Anne Burkhardt: “We are making a serious investment in this area. I see it as an opportunity. Tasks we used to handle manually - such as the initial stages of risk analysis - can now be carried out more efficiently and quickly using AI. This shifts where the value lies. Our clients expect us to provide context, interpretation and conclusions. We will become more efficient with AI, for example by rapidly developing applications tailored to a specific client need. We also work with clients on their use of AI, helping them identify instances of Shadow AI ⁽²⁾ within their organisations so they can adapt their security policies. Recruitment will evolve too. We will be looking for people who are interested in technical tools and understand that AI is becoming part of the way we work collaboratively.”

Explore the other floors of "The Lift" series below. 

Footnotes