Position: Information Security Specialist / Security Compliance Officer
Category: Security
English level: intermediate
Years of experience: 5


1. Information security specialist
Raiffeisen Bank Aval

 analysis of information security
 scanner admin (Nessus (Tenable), Qualys)
 vulnerability management
 software testing for potential vulnerabilities (penetration test)
 monitoring for new exploits
 editing documents

2. IT Security Specialist
KPMG
 ITAuditSupportprojectsforbanks:
 assessment of security of information systems and audit of internal IT control:
 conducting interviews with responsible personnel, checking necessary documents and
relevant processes
 design, implementation, operational efficiency, assessment of controls in business
processes and risk management - testing of general IT controls (design and
implementation testing controls, as well as an assessment of their effectiveness)
 management of access to systems, change management, development and testing of
software, backup, password configurations, control of privileged users, physical access, review for policies and other related documentation, analysis of the applicability of
measures to reduce consequences, audit recommendations  documenting in the e-Audit system
 Work in a team on IT transformation projects for well-known companies and banks
 supportprojectmanagementactivitiesbycreatingstatusreports,trackingdeliverables,
coordinating activities, protocols and other
 research and analyze cybersecurity-related topics, concepts, tools, and processes to
support customer service
 riskmanagement
 vulnerabilitymanagement
3. SecurityComplianceOfficer
PIN-UP TECH
 develop plans, and strategy in compliance with laws, regulations, policies, and standards in support of organizational cyber activities
 develop and implement security policies (ISO/IEC 27001)
 riskmanagement(ISO/IEC27005)
 support internal IT audit
 billingmanagementforservices
 incidentManagementprocess
 develop and implementation awareness training for staff (for onboarding, social
engineering, phishing)