Maxim Danilin Email & Phone Number

Ireland

Zurich, Zurich, Ch

- Cloud security compliance monitoring using Palo Alto Prisma Cloud – detection and management of critical vulnerabilities across AWS and Azure tenants.- Led vulnerability management taskforce that achieved remediation of a several thousands high severity vulnerabilities within 1 year. Taskforce scope included a few thousand servers in 10 business units with inhouse and outsourced patch management operations. - Developed number of reports in Power BI to measure and drive vulnerability remediation. The reports are being used by EMEA CISO Team and patching teams for both executive reporting and operational activities. Power BI reports generated insights to break down huge and cumbersome patching backlog into smaller pieces and manage them individually through transparency and individual accountability. - Coordinating emergency patching when critical vulnerabilities are detected. - Ensuring compliance of EMEA region to technical standards – ensuring security toolkit coverage on all applications, servers and workstations is at appropriate level, weak and default passwords are remediated.

Zurich, Zurich, Ch

Business Unit – Global Corporate in EMEA (France, Belgium, Netherlands, Sweden, Denmark, Finland, Norway, Russia)– Conduct information security due diligence, security assessment and consulting of projects, operational readiness review of the newly built systems.– Assessment of IT controls operated by business unit, reporting to IT and business management and tracking of gap remediation.– Oversight and being the escalation point for the range of information security services delivered to business unit - cyber response, antivirus and malware protection, log management, firewall and proxy management, identity and access management, vulnerability and compliance management, data loss prevention.– Support build and delivery to the business unit of information security projects and initiatives – e.g. network access control, log management, technical standard compliance management.– Stakeholder engagement in various areas and levels - IT and business management, Risk management, Information Governance.

Zurich, Zurich, Ch

– Design and managing the implementation of information security controls during the separation and sale of the part of the Zurich Russia business unit (project included IT infrastructure separation and migration and build-out of information security services for a standalone company). Identification and mitigation of information security risks in a dynamically changing IT environment under pressure from different stakeholders and tight deadlines.– Delivery and support of services provided by Zurich Group Information Security to the Zurich Russia business unit. The best example was the Active Directory Refresh project that implemented a new Active Directory infrastructure and provided Zurich Russia with vital for business operations solid and stable IT platform. Zurich Russia was the first EMEA business unit to completely migrate to new Active Directory infrastructure.– Consulting business unit management regarding IT risks matters on various levels – CEO, COO, Head of IT, Head of Legal and Compliance, Local Risk Officer. – Implementation of Russian Personal Data Protection Law requirements.

Zurich, Zurich, Ch

– Established regular reporting on technical compliance of workstation and server assets with IT baseline standards, increased coverage of information security toolkit from 60% to 95% on over 1500 assets.– Supporting access management process – conducting regular access recertification and making improvements in the process.– Performed internal IT controls assessments and support of external IT audits (several successfully passed internal and external, including regulatory, audit).– Rollout of Data Loss Prevention service where business unit pioneered new technologies and capabilities to better mitigate business risk. Established a mature regular process of Data Loss Prevention incidents review and investigation done by a specially hired member of the team.

– Led projects on the topic of Personal Data Protection for the customers from different industries (pharmaceutical company, collector agency, payment system) with project team up to 4 members.– Pre-sale support, solution design and installation of network security devices (firewalls, IPS).– Developed internal methodology and performed penetration tests and vulnerability assessments.