Position: CISO (Chief Information Security Officer)
Category: Lead
Experience: 11 years | English: upper

Building information and physical security processes, building IT processes (ITIL), auditing and implementing compliance measures in accordance with the requirements of PCI DSS and the GDPR. Also prepared information security documentation and participated in DLT and FCA EMI licensing projects.

Preparation and implementation of certification requirements. Betting & Casino standards - GLI19, GLI33, Romania iGaming, AGCO(Canada), Kahnawaki, MGA(Malta) + PCI DSSS, GDPR, ISO 27*.

Under my guidance, the company was successfully prepared and successfully passed three international payment systems audit PCI DSS, Visa Security, MasterCard Security, obtained a certificate from the USA, Hong Kong, Russia audit authorities.

Conducted more than 10 audits to ensure compliance with PCI DSS as a manager of the project.

Completed international projects as Project Manager with PMBoK Methodology – ArcSight, GFI Web Monitor, Qualys + Nessus. 

Implemented IT security and Physical Security process, as well as best practices and standards (PCI DSS, ISO, ITIL).
Developed more than 50 regulations IT Security documents 

Vulnerability management processes reduce the number of vulnerabilities in IT systems, more than 10 times.

Implementation of security processes made it possible to reduce information security risks by 40% in 6 months.

Participation in the development of the PСI DSS 4.0
Master’s Degree in IT Security, МВА, 15 years IT security experience (IT companies, banking, gambling, e-commerce, crypto).
10 years in IT management (project and functional, up to 16 people). 
IT processes development and implementation. Budgeting and financial reporting. Evaluation and development of employees. Experience with crypto projects. 
Specialized education and MBA allows me to understand well the needs of business, international requirements in this area and effectively implement them within projects.
The effectiveness and correctness of the implementation of compliance processes has been repeatedly confirmed by auditors from the USA, UK, EU, China.

GDPR, PCI DSS,  ISO 27001, IT Security Management, ITIL, Visa Security,  MasterCard Security, PMbok, Physical Security, Risks, Regulation Documents, Information Security, DLT, FCA.

Standards and Best Practices - GDPR, PCI DSS, Visa & MasterCard Security.
ITIL, ISO 25999-2, ISO 27001, ISO 27005, ISO 27701, NIST 800-40, etc.
Betting&Casino - GLI19, GLI33, AGCO(Canada), Kahnawaki, MGA(Malta), Romania iGaming. 

Usage of network scanners: XSpider, Qualys, Nessus, Retina, MBSA, IBM ISS (PES).
Working with intrusion prevention systems IBM IDS, Cisco IPS.
Traffic control systems - Websense, GFI Monitor.
Implementation of SIEM (ArcSight). 
Experience in anti-virus packages Symantec, McAfee, Nod32, Kaspersky, DrWeb, GFI.

Project Management Methodology – PMBok. 7 projects with PMBok successful.
CISO or IT Security consulting

Conducting audits, development, construction and implementation of processes. 
Project and Functional Management.

Preparing the company for the PСI DSS audit.
Assistance in meeting the GDPR requirements
Preparation of regulatory documentation packages in accordance with the requirements of ISO 27***, PCI DSS, GDPR.
Building Vulnerability Management Processes, Risk Analysis. Staff training.

Purposeful and result-oriented. I know how to turn chaos in order.