Nikolay Barakov

-Defining security strategy and business continuity for 90 locations worldwide - Responsibility for the development, implementation and improvement of the Information Security Management System (ISMS) based on ISO 27001 and TISAX (for Automotive) and other specific regulations for the Industrial and Medical divisions - Providing strategic and tactical vision, and execution, focused on incident prevention, detection and response - Reviewing the implementation of new technologies to ensure security compliance

- Leading the development and maintenance of security frameworks (ISO27001, EU GDPR, etc.) across all business units. - Information security risk management - Lead and manage security operations center – SOC. - Business development, acquisition and organization development - Security Awareness program development - DLP - Network, server, and endpoint security - Vulnerability, pen test assessments and remediation - Performing internal and external security audits and risk assessments

- Responsible for the review, implementation, ongoing support, enhancements for various security controls, technologies, standards and infrastructure - Vulnerability assessments and remediation - User provisioning and access management - Incident detection and response - Network, server, and endpoint security - Governance, risk management and compliance - Data loss prevention - Development and maintenance of security policies and procedures according ISO 27001

Planning, building and maintaining highly-available forex systems based on cloud infrastructures Managing configuration automation Designing and managing datacenter infrastructures Configuring scalable, fault resistant and secure network infrastructure Responsible for development and enforcement of the organization’s security policy and strategy Performing IT risk assessments, audits and security incident investigation

Design, implementation and security of information systems for online passenger’s ticketing and CRM services Resource, process and compliance management for remote locations Design, implementation, configuration and maintenance of primary and disaster recovery data centers Develop an ISMS program aligned to ISO 27001 Risk identification, assessment and evaluation System and Network security auditing Managed and support server operating systems and services – Linux and Windows

Development and enforcement of the organization’s security policy and strategy Budgeted the company’s annual IT activities Recruited, hired and managed ICT employees (350 ~ 400 people) Managed the process of allocation of resources in 27 cities Managed and improved information security management program - ISO 27001 PKI (Digital Signatures) Managed many centralized databases and Linux clusters Risk Management and Business Impact Analysis System and Network vulnerability assessments

Managed and coordinated implementation and maintenance of IT technology Provisioned hardware service and system support Maintenance of centralized databases, applications and Wintel/Unix infrastructure and security Managed network and security infrastructure and security for 26 branches and head office based on Cisco architecture Developed, implementation and support of unified system for authorization, authentication and accounting