Dmitrii Zavalei Email & Phone Number

Nicosia, Cyprus

Risk Management & Security Integration: • Conducted comprehensive vulnerability management and risk assessments, integrating security measures into project delivery. • Developed and implemented policies and procedures, increasing the organization’s security level.Identity & Access Management: • Effectively managed user accounts, implementing 2FA and SSO to improve access security. • Integrated HR processes to automate access management, reducing request processing time.Legal & HR Support: • Participated in investigations and forensic analyses, ensuring timely and accurate data delivery. • Achieved full GDPR compliance, preventing potential fines.Client & Partner Support: • Provided client security consulting, harmonizing requirements and recommending secure configurations to increase client satisfaction. • Established strong relationships with key partners through effective communication on information security matters.ISMS Framework Development & Improvement: • Developed and modernized the ISMS framework, implementing metrics and reporting systems to improve process transparency. • Successfully led ISO 27001 certification, including recertification to the latest standard version with no nonconformities.Compliance & Audits: • Conducted internal and external audits for ISO 27001 and PCI DSS, ensuring continuous compliance with standards. • Consistently achieved PCI DSS certification annually, enabling the company to expand its client base.Security Operations: • Led incident management and threat detection efforts, reducing response time. • Implemented threat prevention measures, reducing security incidents.Building a High-Performing Team: • Built a highly effective information security team within a short timeframe, optimizing the use of limited resources. • Developed and implemented clear and efficient security processes, enhancing department efficiency.

Saint-Petersburg, Russia

• Led the development and implementation of comprehensive information security projects, ensuring robust protection of organizational data and systems. • Created and maintained detailed security documentation, coordinated the integration of software solutions, and managed start-up and adjustment phases to operationalize advanced security systems. • Oversaw the entire security lifecycle, from planning to deployment, ensuring full alignment with industry standards and best practices. • Provided strategic guidance and technical expertise to optimize security measures, effectively mitigating risks and enhancing the organization’s overall security posture.

Saint-Petersburg, Russia

Comprehensive Network Audits & Security Enhancement: • Conducted in-depth audits of corporate networks to identify vulnerabilities, enhancing overall security and compliance. • Managed the creation of normative documentation during the pre-project phase, ensuring alignment with industry standards and regulatory requirements. • Designed and implemented a personal data protection system, overseeing all stages from planning to full deployment for thorough security control. • Developed detailed terms of reference for procuring advanced information security tools, ensuring effective security measures.PKI Implementation & Security Tools Administration: • Oversaw the installation and operation of Public Key Infrastructure (PKI) using CryptoPro and CryptoArm, securing communication and data integrity. • Administered SecretNet software to reinforce security protocols and utilized xSpider security analysis tools to detect and mitigate potential threats. • Managed the installation, configuration, and continuous support of security-related software to ensure optimal performance and protection.Documentation & Standardization of Security Protocols: • Developed a comprehensive suite of organizational and administrative documents to standardize security protocols across the company. • Established a cohesive approach to information security, aligning practices with best practices and regulatory compliance.

Saint-Petersburg, Russia

• Conducted corporate network audits to identify vulnerabilities and improve security. • Supervised the creation of normative documentation during the pre-project phase to ensure compliance with standards and regulations. • Developed and designed a comprehensive project for the implementation of a personal data protection system, from planning through to deployment, maintaining control at all stages. • Created detailed terms of reference for the procurement of information security tools, ensuring the selection of effective solutions. • Implemented the personal data protection system, providing continuous oversight to guarantee robust security. • Developed a suite of organizational and administrative documents to standardize and enhance security protocols across the organization.

Saint-Petersburg, Russia

• Developed and implemented organizational and technical measures to safeguard information systems, enhancing their overall security. • Tested a range of information security tools, including automatic telephone exchanges, switches, routers, and removable media verification tools, ensuring their effectiveness and reliability. • Configured and launched hardware and software systems, overseeing installation and administration of application software for secure and optimal performance. • Successfully managed regulatory inspections in the field of information security, ensuring compliance with industry standards and legal requirements.

Saint-Petersburg, Russia

• Created and configured test environments for comprehensive software testing across Windows and Linux operating systems, including Astra Linux, Ubuntu, Debian, and Kali Linux. • Developed detailed test cases to ensure thorough validation and quality assurance of software functionality and performance. • Designed and presented product benefits to potential customers, effectively demonstrating features and capabilities to drive product adoption.

Saint-Petersburg, Russia

• Developed comprehensive information security policies to establish robust frameworks for protecting organizational assets, ensuring compliance with industry standards and best practices. • Tailored policies to address the specific needs and risks of the enterprise, enhancing the overall security posture and guiding secure operations across all departments.