Alex Smirnoff Email & Phone Number

Varna, Bg

Baar, Canton Of Zug, Switzerland

A tech company developing a new type of communications device sporting maximum security with unprecedented niche features.

Varna, Bulgaria

Varna, Bulgaria

What I can do for you • Create information security strategy based on business requirements, as a result of mini-audit and series of interviews with company management. A security strategy is a short practical document describing exactly what a company needs to do immediately to get major improvements in information security posture, what policies and procedures need adjustment, and which products and technologies are worth trying as pilot projects. • Make sense of penetration test results, convert them to actionable plan in accordance to company priorities. • Perform security reviews of projects and product architecture. • Mentor local information security and IT teams to help understand security better.

Moscow, Russian Federation

Parallels is a holding company which consists of multiple businesses and multiple legal entities. I was the first CISO in the company's history (which dates back to 1997), so it was a lot of work to review past practices and establish information security governance and risk management framework, create a set of policies that fit the corporate culture and identify most important changes to be done.Since Parallels included service provider oriented business (now Odin, sold to Ingram Micro), there were quite challenging external requirements the company needed to fulfill, regulatory compliance issues and more. One of our notable accomplishments was ISO27001 certification of Parallels Research, a entity which deals with several customers that require their partners to be certified. This role implied a lot of hands-on experience as well. I implemented continuous vulnerability management program using combination of freely available tools, inexpensive commercial ones and outsourced custom development; it allowed me to get an effective customized framework at a fraction of vendor's price typical for solutions of this class like Qualys and SecurityCenter, and create a foundation for working bug bounty program (there is no point in bug bounty until you solve known problems, right?)Other responsibilities included managing personal data protection company-wide (the function that I later passed to the legal department), working with external audit teams, consulting on product security architecture and mentoring for the secure design and implementing best security practices.

Freelance security consulting. I enjoyed that time!

IT security infrastructure design for Russian government organizations. Job function includes resolving compliance issues and supervising projects implemented by subcontractors.

Firewall development and deployment, general IT security management

General IT support and management (PCs, Elbrus-B mainframe)

System operations and system software development on ES (OS/370 clone) system.