Особисті дані приховані

IVANOV
ANDRII
IT AUDIT, CYBERSECURITY &
RISK MANAGEMENT
SPECIALIST
I have more than 2 years of professional
experience in the field of information
systems security assessment, audit of
internal IT controls (design and
implementation, operational efficiency),
assessment of controls in business
processes, risk management, and
development of programs to raise awareness
of cybersecurity. Before joining the IT audit
team, I worked as a freelance web developer.

EDUCATION AND WORK EXPERIENCE
QUALIFICATION May 2023 - Now
National Aviation University, Kyiv IT audit, Cybersecurity & Risk management specialist
Sept 2021 - Nov 2022 | Computer science
master Testing of general IT controls for banks: testing of design and implementation
of controls, as well as the effectiveness of general IT controls: Access
Granting, Access for Terminated, Privileged access, Change release,
Taras Shevchenko Kiev National configuration management, System jobs and System processes, Password
University,Kyiv configuration in audit support, review of information security policies and
Sept 2017 - June 2021 | Computer science more relevant documentation, identification of weaknesses, identification of
bachelor shortcomings, analysis of the feasibility of mitigation measures and
development of audit recommendations.
SOC 1 assurance engagements for a multinational telecom operator and bank,

CERTIFICATIONS including assessment of design, implementation, and testing of operating
effectiveness for general IT, such as Password Configurations, Incident
2018 № 31876 The first Kyiv State Courses Security Monitoring, Database review, Back-up restoration,etc and revenue
of Foreign Language English level B2 Upper assurance controls.
SOC2 assurance engagements for an international IT company, including
Intermediate
testing operating effectiveness and design implementation for cybersecurity
2025 EF SET Certificate English level B2
incident management and monitoring, vulnerability, and penetration testing
Upper Intermediate. Link:
management, privileged and non-privileged access granting and revocation,
https://cert.efset.org/BHz12Q certifications and documents management controls, physical access and
hardware management controls etc.
CONTACTS Conducting cybersecurity diagnostics for enterprises using the NIST CSF.
Management of training and coordination of junior colleagues during their
internship period.
Email : [відкрити контакти](див. вище в блоці «контактна інформація»)
June 2021 - May 2023
Phone : [відкрити контакти](див. вище в блоці «контактна інформація»)
Telegram: @PrinceOberin Front-end developer
Linkedin: As a developer, I was involved in the development of both desktop and adaptive
[відкрити контакти](див. вище в блоці «контактна інформація») layout sites for mobile devices, as well as setting up the operation of data on the
site and working with databases and writing requests to the server. A set of
technologies was used for the development: HTML,CSS/SCSS, Javascript/Jquery,
ReactJs, working with databases was in Microsoft Access, MySQL, PostgreSQL. Also
have experience with GIT.