Rustam Fayzullin

Performing detailed risk assessments of applications and 3rd parties. Participating in external and internal audits. Supporting IT projects from the Cyber Security perspective. Framework maintenance. Developing Corrective Action Plans after penetration tests, agreeing corrective actions with IT Service Owners, and tracking risk remediation. Performing BAU activities. Participating in SWIFT CSP attestations. Reviewing the EU and German laws and regulations & performing gap analysis. Security Awareness.

Compliance with ISO 27001, legal, industrial, client, and Firm’s IT and cyber security requirements. Liaising with the supervisory authorities and other Deloitte IT Security teams worldwide. Practical experience in passing audits by British Standards Institution, Deloitte Global office, and internal independent teams. Performing detailed risk assessments, BIA, audits, and reviews. Vendor risk assessments. Awareness trainings.

Met Information Security requirements to comply with privacy and data protection laws and regulations as well as internal policies. Liaised with supervisory authorities. Passed several inspections. Conducted internal reviews on different aspects of Information Security. Advised and trained the personnel and the regional authorities in various aspects of Information Security. Developed and implemented the Information Protection System for the State Trusted ICT Infrastructure of the Republic of Bashkortostan.