Position: Information Security and Risk Manager
Category: Security
English level: upper
Years of experience: 7

Project and team management experience, deep understanding of audit and implementation processes at all stages.
Experience in management systems implementation and audit in accordance with the ISO/IEC 9001, ISO/IEC 27001, GDPR, PCI DSS and local regulations requirements for companies in various fields of activity (financial, IT, agribusiness, etc.): 

Compliance audit and cybersecurity level assessment:
    - audit planning, 
    - evidence collection (interviews, sampling, documentation review, etc.),
    - nonconformities classification,
    - report preparation,
    - organization of audit team, communication flows, documentation.

Implementation of Information Security Management System (ISMS), Quality Management System (QMS); support during certification audit:
    - analysis of company profile and requirements applicability,
    - implementation planning,
    - documentation review and design, 
    - business processes analysis, design, implementation, optimization,
    - information security risk management,
    - mitigation actions planning,
    - business continuity management, 
    - security controls implementation, 
    - awareness management.