Mikhail Samkov Email & Phone Number

Moscow, Ru

Москва, Россия

Chief Information Security Officer & Head of Application Security Bank's specific subsidiaries1. in CISO role:- implementing and overseeing your organisation’s cybersecurity program,- aligning cybersecurity and business objectives,- monitoring Incident Response Activities,- promote a culture of strong cybersecurity, - reporting on cybersecurity,- manage cybersecurity budgets.2. in HAppSec:- implement SSDLC (full-cycle), - developing and designing application-level security controls,- perform application security design reviews against new products and services- project management (full-cycle),- manage human resource,- implement risk assessment in development process.

Москва, Россия

1. Virtual Chief Information Security Officer for Bank's specific subsidiaries:- budget management, - taking part on different business initiatives (develop security architecture for products, IT-infrastructure, form requirements, etc.)- select and implement technological cybersecurity solutions- implement risk assessment process,- project management,- vulnerability management (scanning, verification, closure),- incident response and security monitoring,- implement SSDLC,- cyber security third-party assessment.2. Participation in investigations of information security incidents;3. Organization and conduct of audits, assessments of the maturity of information security, instrumental security checks;4. Develop and implement audit methodology;5. Develop and improve audit platform (full cycle platform);6. Managing a team of auditors and technical specialists;7. Development and implement local cybersecurity documents (policy, standart, etc.);8. Reporting audit results for top management of company.

Москва, Россия

1. Managing a team of auditors and technical specialists;2. Develop and coordinate of IT/cybersecurity architecture;3. Organization and conduct of audits, assessments of cybersecurity maturity of subsidiaries4. Consult on the selection, budgeting and implement of information security tools (NGFW, DLP, AV, Vulnerability Scanners, etc.)5. Participate on cybersecurity incidents investigations;6. Organize and implement of instrumental monitoring of the state of cybersecurity of external network resources and infrastructure (instrumental security checks);7. Development and improve cybersecurity audit metodology;8. Formation of reporting materials

Москва, Россия

1. Conducting audits, assessments of cybersecurity maturity in subsidiaries,2. Participation in the development of the Company's IT architecture / products of the Company,3. Participation in the implementation of SPI in subsidiaries (NGFW, DLP, AV, Vulnerability Scanners, etc.),4. Participation in investigations of cybersecurity incidents;5. Conducting instrumental monitoring of the state of cybersecurity of external network resources and infrastructure (instrumental security checks);6. Development of regulatory documents on cybersecurity;7. Formation of reporting materials.

Москва, Россия

• Audit missions related with basic bank process, information security and personal data security• Follow up of recommendations in the information security and information technology fields• Risk assessment related to the entity ASSU-Russia – IT

Москва, Россия

• Install and setup information security software (SIEM, WAF, VS, AV etc.) • Administration Linux • Information system audit • Pilot testing of information security programs • Presentation and demonstration • Write instructions and technical documentation

Магистр Технических Наук, Applied Mathematics, 4,3

Бакалавр, Профессиональный Переводчик В Сфере Бизнес Коммуникации (Английский), 4,3

Бакалавр, Управление Информационной Безопасностью, 4,7