Position: Deputy Head of Compliance
Category: Security
English level: upper
Years of experience: 8

BSI Information Security Management Systems (ISMS) Auditor/Lead Auditor Training Course (BS ISO/IEC 27001:2013)
Certified ISO 27701 PIMS Lead Implementer (CPI LI)
January 2021 – present time Deputy Head of Compliance in Sigma Software Company.
- Conducting audits according to OWASP SAMM, DSOMM, ASVS.
- Developing quality and information management systems (QMS and ISMS). 
- Ensuring compliance of the quality and information security management system with the requirements of ISO 9001 and ISO 27001;
- GDPR compliance assessment of clients. Preparation a report with gaps, risks and recommendations;
- Developing a Business Continuity Management System (BCP) in accordance with ISO 22301;
- Implementing and supporting awareness program of quality and security aspects in the Company;
- Developing and implementing the department strategy;
- Preparing and conducting internal audits;
- Reviewing security requirements in agreements and NDAs;
- Defining and documenting Company's policies and procedures;
- Leading and training team of Compliance Managers;
 - Maintaining and improving Compliance Departmental operational performance to meet the requirements of external and internal customers;
 - Collecting and analyzing of external and internal customers feedbacks for process improvements.
Previous work experience:
November 2019 – January 2021 Global IT Auditor in Solera Company (Audatex Ukraine).
- Conducting internal IT audit regarding internal IS policies in offices all over the world;
- Conducting IS audit according to ISO 27001&27002, 22301 standards;
- Preparation of reports with recommendations to remediate the identified deficiencies and presentation to Top Management;
- Take part in remediation of findings identified during the audit;
- Review external audit results and monitor implementation;
August 2015 – November 2019 Senior IT Consultant in Deloitte Touche Tohmatsu Limited.
- Conducted general assessment of Client IT Environment, assessment of design and implementation of General IT Controls, operating effectiveness testing within Banking sector, Manufacturing, Energy Industries’ IT Companies;
- Risk assessment. Preparation of reports with recommendations to remediate the identified deficiencies;
- SOX audit;
Information security audit (ISMS, ISO 27001);
- DRP plans developing;
- GDPR compliance audit;
- Carried out the evaluation of the separate business processes controls’ design and testing operating effectiveness;
- Analysis of large data and preparation of statistics and reports.
- Role matrix development.