Dmitry Yanchenko Email & Phone Number

Dubai, AE

Advix is a boutique technology consulting agency founded by C-suite experts from billion-dollar fintech, banking, technology and social platform companies.Our mission is to create a healthier business environment for everyone by spreading unique knowledge over the borders of the corporate world.Advix brings unmatched expertise to support both your everyday.

• Achieved SOC 1 & SOC 2 compliance.
• Established a multi-level Access and Identity Management system based on hardware security keys, bastions and other factors.
• Established an Application Security program for developers, shifted left detection of critical bugs on the project timeline.
• Established and improved Security architecture, Risk management, Identity management, Threat detection & prevention, Mobile device management, Security operations, Application Security and Bug bounty program.
• Successfully passed several penetration tests from market leaders.

London, GB

• Aligned company processes with FCA, GDPR and PCI DSS requirements, approved by qualified third-parties.
• Ensured acceptable security level at every step of setting up and maintaining a bank from scratch.
• Projected and implemented a bullet-proof mobile and web applications.
• All audits and penetration tests have been passed from first attempt.

Moscow, Moscow, RU

• Seamlessly integrated the AppSec practices into development process, including Threat modeling, Risk assessment, Security design and architecture review, Static and dynamic application security testing, Security.
• Set up an internal awareness events for developers' active engaging.
• Set up external CTFs on a security conferences for hunting the champions.
• Participated in several CTFs across the world.
• Public conferences speaker.

Moscow, RU

• Implemented the Business impact analysis and Risk management processes.
• Enforced an Application security program.
• Developed internal security standards and procedures to speed up the change approvals processes.
• Performed internal audit on compliance with local data protection regulation.

Moscow, RU

• IT Security Audits (including PCI DSS and ISO 27001) for external customers.
• ISO 27001 and PCI DSS implementation.
• Got the Approved Scanning Vendor (ASV) status for the company from PCI Security Council.

Москва, RU

• Implementation an ISO27001-based Information security management system.
• Deployment of security operations and controls.
• Implemented workstations management and controls, Closed software environment, Device hardware integrity monitoring, Intrusion detection systems, Audit events logging and alerting.
• Developed and implemented additional physical security controls.
• Developed and provided the Security awareness and testing program for staff.