Enforcement of information security management program based on ISO27001and critical infrastructure protection regulation. Building privacy and personal data protection bastion based on GDPR and RF FZ-152 regulations.- Corporate network infrastructure protection with Cisco/Fortinet, SIEM- Protection of ERP and ICS systems- Orchestrating Azure protection (conditional access, PIM, identity protection) and Office365 Defender- Commercial secrets protection based on Microsoft AIP and DLP- Operational vulnerability management with Qualys, xSpider- WEB business initiatives security support (SSDLC, antiDDoS, WAF)- IT/IS incident management as a part of crisis management process - Running IS awareness program for co-workers, learning blocks: basic infosec, commercial secrets, social engineering and privacy

Developing of internal information security and data privacy regulation framework based on ISO2700x and FZ-152/GDPR, leading awareness campaign. Perform various IS tasks and projects including business impact assessments, data mapping and categorization, supporting secure business process digitalization in cloud services. Implement instituted compliance metrics to decrease enterprise risks.- Development of information security regulation framework, leading awareness training and e-learning,- Realization of business data protection program, incl working-out of the commercial secret protection mode, implementation of data leakage prevention tool (PM in DLP project),- Information security risk assessment in digital initiatives and projects,- Security provision in customer data mapping and process modelling in B2C - OMNI project (cloud SAP Hybris),- Enabler of crisis management / business continuity planning / disaster recovery processes,- Supporting global initiatives, e.g. business impact analysis, information protection profiles, anti-phishing campaign,- Ensuring FZ-152/GDPR compliance for company's personal data processing systems.

Designed metrics for measuring and improving the effectiveness of the overall information security plan. Improved organizational work performance by managing information risks incl business impact analysis in core business processes and systems (CRM, SAP FI/HR/IC, DWH, EDI, POS, and Bank operations). Assuring compliance with international and RF's laws and standards (ISO270x, NIST, PCI DSS, COBIT, BDSG, FZ-152).• Developed matrix of users' access rights and entitlements to business critical systems and system of tracking critical user operations with data.• Supported corporate IS projects incl WEB cyber security, SAP security, Risk management, Self-check audits, PCI DSS assessment.• Successfully protected personal data in organization incl assistance to data protection audits performed by state supervisory authority.• Matrix leader for IS managers of Eastern Europe Region.

Oversaw a team of personnel focused on technical issues, including IT services configuration, product releases, and engineering tasks. Raised feature enhancements to improve software, based on customer requirements and feedback. Created new corporate WAN/LAN segment in Russia, rollout of corporate MS AD services.• Operated IT Infrastructure through Solaris/Windows/Linux servers, LAN/WAN.• Managed active directory by domain groups and policies; administering email services MS Exchange, Sendmail and proxies ISA, Squid.• Achieved project desire results including J2EE middleware, web and mobile sales modules implementation (SAP Sales);• Secured network by monitoring VPNs, firewalls (PIX), routers (Cisco), and IDS (Site Protector).