Position: Information Security Officer, Engineer, Security Manager, Security Lead
Category: Security
English level: intermediate
Years of experience: 11

Main achievements:
• The infrastructure security and monitoring process, cloud security monitoring (AWS).
• Implemented an access and role management process.
• Selected, purchased and started to use the End-point detection and response tool.
• Categorized company data, identified sensitive data, prepared a plan to reduce the risk of their loss and disclosure.
• Developed process for secure integration of 3rd party services.
• Advice on data processing and protection under the GDPR. 
• Launched LMS for information security awareness.
• Security team concept created and hiring started.
• Creating and managing effective data privacy and data security solutions.
• Working to align advanced technologies and Privacy by Design and Privacy by default principles from the first stages of development and ensure that the data use meets established regulatory compliance needs.
• The management of the data privacy, data protection, data usability, performance and the integrity of the privacy solution.
• Implementation a risk management process for personal data risks.
• Implementation a regular audit process for all critical assets.
• Performing regular privacy assessments of operational processes.
• Identifying and mitigating risks across the company through effective tools and guidance, risk matrix, OWASP Risk Rating Calculator.
• RACI matrix, Incident response and Escalation policy.
I make security a process, not documents that no one reads)
More than 10 years of experience in the IT industry. Experience in international companies.
- Knowledge in software development security (food tech, betting), financial services, oil production
- Knowledge of international information security and privacy standards (ISO270xx, GDPR, PCI DSS)
- Experience in working with external security audit (Ernst & Young, Deloitte, GLI)
- Experience in infrastructure security and monitoring process, cloud security monitoring
- Knowledge of market security solutions
- Develop application security and cloud security requirements (AWS)
- Privacy by Design and Privacy by default principles for Data Security.
- Data anonymization, data protection at rest and in transit.
- Experience in vulnerability scanning (OWASP Zap, Burpsuite, nmap, nikto)
I have extensive experience in various fields such as the banking sector and product companies such as the betting sector and food tech.
I want to apply my knowledge in a new project and get pleasant emotions from working in a new team.