Nikolay Nikolaev's Linkedin Analytics

I am a senior information security professional who is educated to MSc Cyber Security level with extensive experience in Finance, Cybersecurity, IT, GRC and Telecom industries. In addition, I have in-depth exposure to Government, Retail, Travel, Manufacturing, Gambling, Commerce and Wholesale. I am a successful team leader with a wealth of experience overseeing the strategy and delivery of the enterprise's information security function. Proven expertise in leading information security projects, developing information security strategies, governance frameworks and building a people-centric and focused security culture. From my 10 years of information security experience, I obtained in-depth understanding experience and practical application of following areas: o Information security management system’s principles and techniques o Cybersecurity o Information security for datacenters’ operations Strong practical application of the above three areas through skills set related to: o Organizational controls o People controls o Physical controls o Technological controls & IT infrastructure knowledge With expertise in the above, I deliver solid results related to identify, protect, detect, respond, and recover via preventive, detective, and corrective actions. I have provided outstanding outcomes within the following information security Operational Aspects: o Governance o Risk management inclusive of risk assessment and treatment o Asset management o Incident management o Project management o Information protection o Human resource security o Physical security o System and network security o Application security o Secure configuration o Identity and access management o Threat and vulnerability management o Business continuity and disaster recovery o Backup o Supplier relationships security o Legal, regulatory and compliance o Information security event management, and Information security assurance o Capacity planning o Service and operational levels agreements o Top management reporting and communication o Penetration testing and vulnerability scanning Produced the following Risk Management results: o Assessment of risks related to the controls and operations listed above o Understanding and awareness of threat actor tools, techniques and procedures o Effectiveness and adequacy of risk management: methodology, register and treatment plan o Collaboration with subject matter experts to research, develop and implement risk-mitigation strategies to counter current and emerging threats o Performance of third party and cloud hosted services reviews