Position: Chief Information Security Officer, CISO, CIO
Category: Security
English level: fluent
Years of experience: 11

Built ISMS, fully compliant to ISO 27001 (with all administrative, technical, physical controls) form the scratch which responses to business needs.
Deployed productivity, manageability tools: RBAC, MDM, Teams, SharePoint infrastructure.
Implemented processes/measures that allowed fully remote work for the personnel.
Implemented infrastructure managements tools and processes: design according to business needs, on/off boarding, assets management, operations management, licensing, etc.
More than 10 years of experience in Information Security, Compliance, Data Protection and Infrastructure management. 20+ years in software outsourcing industry.  
- Information Security Governance, Risk management and Compliance
- Analyzing business strategies, customer expectations, compliance regulations, standards, risks as inputs to Information Security Management System (ISMS)
- Transforming those inputs into cost effective infrastructure/security solutions
- Analyzing risks and building relevant security/infrastructure response strategies
- Interaction with the stakeholders of different levels: C-level, middle management, customers
- Building ISMS from the scratch (based on ISO 2700x, ISO 22301/22313, NIST SPs), including policies, infrastructure management and security processes/procedures, technical/physical controls
- ISMS awareness program development and delivery
- Cooperating with peer departments on creating and implementing users/systems provisioning/de-provisioning processes
- Cooperating with customers on Information Security and Data Protection measures, regulatory compliance. I.e. discussions, security questionnaires, audits 
- Familiarity with: ISO 2700x, GDPR, ISO 22301/22313, NIST SPs, HIPAA, OWASP principles, PCI DSS
- Planning/implementing Business Continuity and Disaster Recovery processes and measures
- IT infrastructure planning, [re]design, improvements as the response to business environment and security requirements changes
- Hands-on experience with Office 365 tools: Active Directory, MDM, SharePoint, Teams, Exchange, Compliance, Security
- Deploying MDM for corporate devices, Teams (policies, voice, teams), structured corporate data storage based on SharePoint
- Implementing principles/approaches of: RBAC, Least Privileges, MFA, Conditional Access, Single Sign-On, DLP, Litigation Hold
- Familiarity with Azure tools
- Budgeting/Planning, provisioning/de-provisioning of licenses, business tools, hardware
- Analyzing/optimizing security/infrastructure cost of ownership
- Assets management processes: standardization, accounting, purchases, cost optimization, support, phasing out
- Incident management, log analysis
- Managing Service Desk 
- Managing IT team
- Motivated, looking for well-balanced decisions/solutions, result oriented, processes oriented, able to work in multi-cultural environment
- Strong background in project/process management
- Certifications, educations: CISSP, GDPR, ISO 27001, PMI PMP
I'd like to work in an environment where GRC and security processes are essential part of the business.
I'd like to have the right balance of responsibilities, authorities, autonomy in building effective security/infrastructure processes which help a business to grow.
I am looking for challenging tasks, professional opportunities.
Also, I'd be happy to take leading part in ISO 27001/SOC2 or similar certifications.