Cloud Security Architecture & Governance Design and oversee the security architecture across Azure, M365, and hybrid infrastructures, also MSFT security Stack as Defender family. Define and enforce governance standards: identity, access control, device compliance, and data protection. Lead implementation of Zero Trust principles across identities, endpoints, networks, and applications via Intune and SCCM/MECM and AppleBusinessManager Microsoft Security Cloud Ownership Manage and optimize the full Microsoft Defender XDR suite, Entra ID security, Purview, and Defender for Cloud. Drive configuration baselines, threat protection policies, and environment hardening. Evaluate and enable new Microsoft security features to continually enhance protection. Security Program Leadership Develop and maintain security policies, operational standards, and long‑term security strategy. Lead cross‑team security initiatives with IT, infrastructure, cloud, and business units. Plan and manage security projects, migrations, and platform deployments. Risk, Compliance & Posture Management Assess technical and organizational security risks, propose mitigation plans, and ensure continuous improvement. Maintain compliance with internal requirements and industry standards. Oversee vulnerability management, secure configuration management, and cloud posture scoring. Technical Leadership & Enablement Act as the main expert and advisor for Microsoft Security Cloud technologies. Mentor engineers, provide guidance on best practices, and drive capability development. Deliver training, technical workshops, and executive briefings. Visibility, Reporting & Stakeholder Engagement Produce high‑level dashboards, risk reports, and insights for leadership. Communicate security posture, trends, and investment needs to executives. Align security priorities with business goals and resource planning.

Responsibilities: * development and updating of normative and technical documentation on information security for the Company and information systems of Customers; * participation in the preparation of customers' information systems for testing for compliance with information security requirements; * analysis of information security risks and the formation of the necessary IS requirements; * Experience with monitoring systems and information security incident management, control system over privileged users; * Administration of hardware and software systems for information security (SIEM systems, PAM, NAC, WAF); * organization and participation in external audits, including unscheduled audits, of the Company and projects developed and / or supported by the Company within its competence;

Full technical support IT infrastructure of customers Install, deploy, maintence, securing and reporting off all staff Work in a service company as a technical expert, adding to knowledge base, problem solving, educating team

Information protection: Delineates the access of Bank employees to information resources in accordance with the Bank's internal documents (GNI); It protects the Bank's information resources from computer viruses and other malware; He is involved in the development of technological and regulatory documents regulating the implementation and maintenance of information systems; He participates in the development and control of corporate network security policies and standards, telecommunications equipment settings and information systems; Administers and monitors the Bank's corporate computer network security systems, server policies and rules related to information security. Monitors system and network administrators, technicians and users of the local network, detects cases of unauthorized actions and, if necessary, blocks access to THE LAS and information resources in advance with the Chief of THEIST, and in his absence as Chief of the Office; Administers and monitors the Bank's network and server systems for security and information security, with the right to shut down in the event of threats and risky events of users and services, until the circumstances are clarified; Works to delineate access of network users, system administrators and technicians to the Bank's information resources; Oversees the Bank's compliance with information security requirements; He takes part in the selection, implementation and testing of modern electronic and telecommunications technologies, cryptography and anti-virus protection tools; He is involved in ensuring compliance with backup and recovery technology; Monitors compliance with the established order of generation, storage and use of cryptographic keys; Collects and analyses of violations and incident statistics, and is involved in the development of measures to improve the protection system; Oversees the licensed purity of the system and application software used; It categorizes the channels of information leakage, mechanisms of their occurrence, technical means of industrial intelligence; Participates in card business security activities; Prints PIN envelopes of payment card system, then transfer them and send them to authorized employees of the Head Bank and its Branches Prepares and presents to the Chief of the Office of Proposals for the Improvement of the Bank's Information Security System, pilot testing, selection, implementation of the necessary solutions and their subsequent administration and technical support, ensures its compliance with the requirements of the Bank's Information Security Policy and international information security standards; Perform the duties of The Security Administrator of the designated resources of the Bank's local-computing network, on the orders of the Chairman of the Bank's Board. Timely corrects and eliminates the shortcomings identified independently or during audits with coordination with the Head of the IPNT

Provision of full technical efficiency and support the brances and offices in RK -Audit and monitoring of the corporate network -Managing User Accounts -Controls user access to network resources -The study and the launch of new hardware and software -Installation of integrated network solutions and individual hardware -Optimization and automation of internal processes and procedures -Participation in the development of testing and implementing their own software development. -Deploy & Administering Office365 Exchange online(hybrid) -Administering spam filter software -Administering IP telephone system -Upgrade to Windows Server 2012R2, Windows 8/10 Ent -Deploy 1С 8.3 -Deploy Microsoft SQL 2012 -Active Directory -DirectAccess -Deploy Remote Desktop Services -Virtualize Servers & Services -Plan and execute IT budget -Inplementing and improvment IT secure policy -Introduction and maintenance of video-call systems -Deploy Azure Backup -Deploy Microsoft Teams

Provision of full technical efficiency and support the CIS and Central Asia Office -Audit and monitoring of the corporate network -Managing User Accounts -Controls user access to network resources -The study and the launch of new hardware and software -Installation of integrated network solutions and individual hardware -Optimization and automation of internal processes and procedures -Participation in the development of testing and implementing their own software development. -Administering Office365pro/Exchange Online -Upgrade to Windows Server 2012R2, Windows 8/10 Ent -Deploy 1С 8.3 -Deploy Microsoft SQL 2012 -Active Directory -DirectAccess -Deploy Remote Desktop Services -Virtualize Servers & Services -Plan and execute IT budget -Introduction and maintenance of video-call systems and some more+

Audit and monitoring of the corporate network Managing User Accounts Controls user access to network resources The study and the launch of new hardware and software Compliance with the requests people Naumen ServiceDesk Installation of integrated network solutions and individual hardware Optimization and automation of internal processes and procedures Participation in the development of testing and implementing their own software development.

Instructor Program Cisco Networking Academy I taught courses IT essentials, CCNA.

Providing full technical performance and support offices Audit and monitoring of the corporate network Managing User Accounts Controls user access to network resources Optimization and automation of internal processes and procedures -Moving to a new platform Windows Server 2008R2, Windows 7 Pro Virtualization of servers and services -Support partners in the Country

Audit and monitoring of the corporate network Managing User Accounts Controls user access to network resources The study and the launch of new technology and software tools Performance of users' in HP OpenView ServiceDesk Installation of integrated network solutions and individual hardware Optimization and automation of internal processes and procedures

Maintenance of computer, network, server and office equipment organization. - contact manager - delivery of services and product

Condition monitoring traffic on Last Mile. Customer support system Megaline, VIP and ID TV. Work with problem tickets of varying complexity.

Maintenance of computer, network, server and office equipment organization. User support, electronic document management system (DMS), the conclusion of treaties. (Total: 100 PCs, 7 servers, 37 MFD). - Reduce the load and the number of servers from 7 to 3 by pooling common resources and services. - Reduce the number of the users in tech support. - Implemented Microsoft System Center Essentials, and Windows Server Update Services 3.0 SP1 - Monitor and audit of IT assets, as well as reporting.

Instructor Program Cisco Networking Academy I taught courses IT essentials, CCNA. Maintenance of computer, network, server and office equipment, trouble shooting, tuning. (Total capacity: 80 computers, 3 servers, 5 MFD). - Developed and implemented standards-based Active Directory, - Organized a single network infrastructure - Combine educational and useful resources - Organized the ubiquitous single point of access to the Internet.