Работал в 3 компаниях 6 лет 4 месяца
IT, IT-консалтинг / Услуги / Производство оборудования, Услуги для населения - другое
Cyber security consultant - Freelance (one-off projects)
Germany Discontia GmbH - PRINTEGI
IT
1 месяц
10.2023 - 11.2023
Responsibilities:
*Cybersecurity risk assessment
*Developed a cybersecurity incident mitigation plan
*Developed a disaster recovery plan
*Developed Likelihood and Impact Risk Matrix
*Created an RBAC Matrix
*Created documentation about backup and passwords
*Conducted cloud environment security review
*Cybersecurity awareness trainings: phishing, smishing, social engineering etc.
*Provided advice on various cybersecurity issues:
- opening potentially malicious files and links in the virtual machine andsandbox(desktop and web versions),
- secure sending of email,
- email protection,
- DDoS prevention, etc.
Compliance manager Freelance (one-off projects)
NDA Denmark
IT-консалтинг / Услуги / Производство оборудования
3 месяца
07.2023 - 10.2023
Responsibilities:
*Developed ISO 27001 policies and procedures
*AWS - working with it, writing procedures
*Work with RACI responsibility matrix
*Consultation:
- procedures and policies;
- work with backup;
- assess and manage information security risks associated with suppliers (vendors) and third-party service providers
Team lead ( full-time )
Discover-Lv
Услуги для населения - другое
5 лет 10 месяцев
04.2016 - 02.2022
Responsibilities:
*Led the team: recruitment, selection and training of employees and mentoring
*search for clients
*communication with clients in ukrainian, english, polish, russian. In general, I was the one who could solve issues with the client at the highest level, especially when other managers could not do it
*sale of company services
My KPI was the highest among all other employees - outgrew the mentor very quickly - overall this is one of my strong achievements - later I led the team.
Ключевая информация
Familiarity with:
* OSI, TCP\IP network model
* DNS, TLS, SSL, IPv4, IPv6, FTP, WS, HTTPS, SNMP, SMTP, POP3, IMAP,ARP, NDP, ICMP, DHCP, RIP, OSPF, BGP, EIGRP, TCP, UDP, SSH etc - main network protocols understanding
* Main cyber threats understanding (Phishing (different types), DoS/DDoS,Pharming, Malware, MITM, Ransomware, Trojan etc )
* Sandbox, Sandboxie, Windows Sandbox, MS Defender Application Guard
* VMware, VirtualBox
* MITRE ATT&CK
* OWASP top 10
* SIEM, IDS/IPS, AV, EDR, XDR , Firewall, WAF, NGFW
* DMZ, Email Gateway (Email Security)
* VPN, Proxy, IPSec, OpenVPN
* IAM ( GCP - Google Cloud), AAA - Authentication, Authorization, Accounting
* Active Directory, LDAP, Kerberos, Diameter, RADIUS, CHAP, TACACS+
* RBAC, ABAC, DAC, MAC
* DLP ( GCP - Google Cloud)
* SDLC / SSDLC
* SaaS, PaaS, IaaS
* AWS - basic understanding of services
* GRC:
* Strong knowledge ISO 27001:2022 + ISO 27002:2022; ISO 27005
* ISO 19011: Guidelines for auditing management systems
* ISO 38500 IT. Governance of IT for the organization
* ISO 20000-1 IT. Service management
* GDPR, NIST CSF, COBIT 5, PCI DSS, NBU №95
* Writing Policies and Procedures
* Risk management
* Risk assessment
* Risk handling techniques
* Vendor \ third-party risk management lifecycle
* Testing employees for phishing attacks and other cybersecurity awarenessactivities. (www.knowbe4.com platform).
* Training for employees and consulting on information security
* Disaster recovery, RPO, RTO
* ACS - Access Control System \ СКУД
* FDAS - Fire Detection And Alarm System \ ОПС
* CCTV - Closed-circuit television\ Video monitoring \ СВН
* Agile, Scrum, Waterfall, Kanban
* Linux administration - in progress
Учился в 1 заведении
Інститут права та психології ЛП
Юрист
2007, 2012
Владеет языками
Английский
выше среднего
Может проходить собеседование на этом языке
Может проходить собеседование на этом языке
Польский
средний
Может проходить собеседование на этом языке
Может проходить собеседование на этом языке
Русский
свободно
Украинский
родной
Может проходить собеседование на этом языке
Может проходить собеседование на этом языке
Курсы, тренинги, сертификаты
Courses (Completed) ---------> Comptia CASP+ ( Governanace Risk and Compliance* )
In progress: CISA, ISO 27001 Lead Auditor \ Lead Implementer
Courses (finished )-----> Comptia Security+ Comptia CSA+ (Cybersecurity Analyst) Course CCNA - (Cisco Certified Network Associate (Netacad)) , Course SSCP ( Access Controls )
Роман
Роман
Information security analyst, SOC, Cyber Security Analyst, інформаційна безпека, ІТ Аудит
Львов
полная занятость, неполная занятость, проектная работа
Характер работы: стажировка / практика, удаленная работа, посменная работа, гибридная, в офисе/на месте
Обновлено 1 месяц назад