Alexey Nosov Email & Phone Number

Prague, Czechia

London, England, Gb

* Manage governance, risk management, internal audit, and reporting activities to meet ISO 27001 requirements. Led the preparation for certification and successfully passed the external audit.* Work with leadership to define information security strategy and objectives. Monitor and report on project progress and security outcomes.* Lead ongoing compliance initiatives with relevant laws and regulations - e.g. GDPR, DORA etc.* Enhance security awareness across the company. Collaborate with development teams to promote and implement secure coding practices throughout the SDLC.* Engage with clients to set expectations, confirm requirements and priorities, and provide regular updates on delivery status. Review security architecture and requirements for projects, identify issues, and provide guidance on necessary security enhancements.* Oversee and manage technical security controls, including IAM policies, antivirus, vulnerability management, and network and cloud security.

Dublin 2, Ie

* Managed SOC service delivery for multiple clients, resolving delivery issues and recommending corrective actions.* Led a team of 40+ SOC analysts, responsible for hiring, development, performance reviews, and issue resolution.* Helped mature SOC service by optimizing processes, developing rules, and improving procedures for alert triage, analysis, and reporting; created or enhanced over 50 SOC procedures.* Reviewed and refined over 100 Splunk detection rules, correcting critical search logic flaws and significantly reducing false positive rates.* Managed client relationships through presentations, reporting, and automating data collection with Splunk dashboards and searches.

Dublin 2, Ie

* Led SOC Operations for several clients* Reviewed and refined detection rules decreasing FP rate and fixing issues with logic* Developed and maintained SOP's for Tier 1 SOC analysts* Developed regular reports for the clients

Geneva, Ch

* Managed network security operations, ensuring access and configuration changes for firewalls, proxies, VPNs, and email were aligned with internal standards.* Reviewed and audited privileged access, proxy exceptions, firewall policies, and VPN configurations.

* Deployed and configured security solutions for information classification, endpoint protection, and system monitoring. * Created technical and project documentation outlining security requirements and implementation details.* Assisted clients in aligning their processes with local personal data protection and privacy regulations.

* Developed information security policies, standards, and procedures to align with industry best practices, including ISO 27001 and NIST frameworks.