Main achievements:• Launched the infrastructure security and monitoring proccess (AWS).• Implemented an access and role management process.• Selected, purchased and started to use the End-point detection and response tool.• Categorized company data, identified sensitive data, prepared a plan to reduce the risk of their loss and disclosure.• Developed process for secure integration of 3rd party services.• Advice on data processing and protection under the GDPR.• Launched LMS for information security awareness.• Security team concept created and hiring started.

• Creating and managing effective data privacy and data security solutions.• Working to align advanced technologies and Privacy by Design and Privacy by default principles from the first stages of development and ensure that the data use meets established regulatory compliance needs.• The management of the data privacy, data protection, data usability, performance and the integrity of the privacy solution.• Implementation a risk management process for personal data risks.• Implementation a regular audit process for all critical assets.• Performing regular privacy assessments of operational processes.• Identifying and mitigating risks across the company through effective tools and guidance.

• GLI gambling standard – audit and information security compliance.• Security in development and support processes for AWS and other virtual services.• Linux Hardering.• GDPR compliance.• Сollection and analysis of logs and statistics from development servers (auditbeat + ELK).• Ensuring data security in the call center.• Categorization and protection of collected user data.

• Project Manager: creating a Geo-Seismic Data Processing Center's infrastructure.• Organization of protection and data transmission in the closed network of the Processing Center.• Administration of the Dell PowerEdge Blade high-performance cluster using Mellanox Infiniband (Centos).• Construction and administration of access control systems in the premises of the enterprise, video surveillance system and employees’ attendance tracking system using biometric sensors.• Budget planning of the department, purchase of software and equipment.

• Information security audit.• Development and implementation of information security policies and technical protection.• Business continuity planning.• Development documentation for information security standard NBU 65.1 ISMS (ISO/IEC 27001:2005).• Risk management, corrective and preventive measures.• Monitoring system implementation of client operations for Internet Banking (FraudDetection).• Monitoring, IPS/IDS (OSSEC, Snort, Zabbix, Nagios).• ZLock administrator (device and PC peripherals control).• Mail security administrating (Websense Email Security).• Сall recording software administrating - analog and VoIP telephony (Cyclone, Amur).• Internet gateway administrating (Squid - FreeBSD).• Jabber server administrating (OpenFire).• Project of improving positive image of the Bank in search engines and electronic media (SEO expert).• Key Distribution Center administrating.• Budget planning, purchase of software and equipment (Tender Committee), control of information systems access cards of the Bank.