Demian Ostrovskyi Email & Phone Number

Sydney, New South Wales, Australia

Sydney, Australia

Sydney, Australia

Governance, Risk Management, Control Assurance

Belarus

• Worked on continual improvement of IT processes to ensure best audit results
• Adjusted Identity management and Change Management processes to comply with SOX and ISO27001 (closed all significant deficiencies)
• Defended control’s effectiveness in front of external auditors
• Developed and launched strategic plan for IT security
• Established Security operations center, Implemented security monitoring and incident response processes
• Integrated Single sign-on solution (Centrify) on over 50 systems

Minsk, Belarus

• Implemented IT Audit lifecycle – defined the scope of audit, controls matrix (ITGC and application controls) based on CobiT
• Performed regular audit of application and ITGC controls in areas: Project and Change management, Identity and Access management, Incident Management, Business continuity, Disaster recovery, Physical security
• Executed audits against local regulatory requirements (Private data security)

Kyiv, Ukraine

• Performed regular audit of ITGC controls, based on CobiT
• Reviewed IT policies and procedures before approval
• Audited compliance with local legislation - “Personal data protection”. Recommended additional access restriction and detective controls implementation
• Implemented Segregation of Duties in SAP ERP as an individual project: created SOD matrix, organized changes in employee’s duties to avoid 98% of risks, designed detective control to mitigate residual risk

Bachelor'S Degree, Maths, Physics, Telecommunication Theory, Сryptology, Information Security Etc.

Activities and Societies: Graduated with Honors

Master'S Degree, Information Security (Methodology, Equipment), Telecommunications

Activities and Societies: Graduated with Honors