• Established IT Security function within organization from scratch and raised it to the level of department.• Developed and implemented full complex of Security Policies, standards and procedures.• Planned, asserted and managed a security unit annual budget. Performed negotiations with suppliers, making up to 70% discount deals. • Developed corporate security strategy for 2011-2015 period aimed to become fully compliant with ISO27001 as it was recommended by Big-4 audits and shareholders decision.• Created and developed centralized Security events monitoring center (8x5)• Established processes of network and information systems security audits on regular basis thus reducing the risks of business process interruptions significantly. • Initiated, organized and accomplished complex projects of SIEM, device control and full disk encryption, suppliers and consultants controlling infrastructures implementation.• Organized cooperation with Banks on security improvements to Client-Bank payment processes in ~20 cities of Volia’s presence.• Established a process of obligatory technical security acceptance tests prior to putting of any third party or internally developed systems into operation. • Supported State Law Enforcement agencies’ audits and requests in close cooperation with legal department.• Implemented internal security awareness trainings.

SIEM/Log Management solutions implementationIT Security consulting and auditing (ISO 27001/PCI DSS)

•Developed a wide range of corporate IT Security standards and policies. •Security audits and pentests of all the new business platforms and projects of the company.•Created centralized log collection and management system.•Centralized security events monitoring infrastructure (SMC) creation and management.•Developed automatic software analyzation Lab for Computer Security Incident Response Team CIRT/SIRT•Developed and implemented company’s global security events notification system.•Creation of complex automated 24/7 system of monitoring administrators’ and suppliers’ activities on the business critical platforms of the company.•IT Security events investigation•SOX compliance and Risk management team support.•Wireless security testing and management

Responsibilities:Internal security auditsIT Security infrastructure managementComplex IT disaster recovery plans creation and implementation as a part of a global business continuity schemaIT Security incidents investigationInternal security procedures and policies creation and implementationSecurity related consulting and support of every internal project of the company.

Development of multiplatform Network Intrusions Detection and Prevention system (NIDS/IPS) as a part of the "Security Suite" project (Personal Firewall + IDS + Avirus + AntiSpy).