Olga Limonova

· Designed and implemented a global security awareness strategy covering 6 countries / 10 subsidiaries / 1,8K employees. · Decreased phishing click rates from 17% to 3% within 5 months through targeted campaigns. · Organized IT Security Awareness Sessions and CTF competition for tech and non-tech colleagues. · Produced reports, e-courses, presentations, digital posters, monthly digests, newsletters and posts.

- Development and maintenance of information security training courses - Development of materials and supervision of Security Champions (the practice of training 1-2 people within the development team in the basics of AppSec, to ensure the basic security of the product / service being developed and to act as a single point of contact with information security management) - Writing weekly news and articles for the corporate blog - Providing information support in matters of information security training (development of materials, recommendations, mailing lists, etc.) - Leading the professional cybersecurity community within the company - Organization and holding of meetups, webinars, online training and other internal events - Facilitating the participation of colleagues in external events and conferences on information security (as participants or speakers) - Conducting cyber exercises (sending simulated phishing attacks in order to test the skills of safe work with mail among bank employees)

- Project management within the framework of consulting (pentest, security analysis of websites, mobile applications, remote banking), investigations - Development and execution of all accompanying documentation - Communication with customers

- Monitoring and analysis of information security events - Proactive search and detection of possible cyber fraud scenarios - Preparation of analytical reports and information and reference materials - Preparing cybersecurity training materials for employees and clients - Coordination, editing of materials on the topic of cybersecurity for clients / employees prepared by other departments - Development and maintenance of information and training projects to promote the basics / rules of cybersecurity for clients and employees - Preparation of plans and reports (weekly, quarterly, etc.) - Organization of cyber exercises for employees: interaction with performers, with colleagues from the bank's specialized departments, analysis of the results, preparation of a report

- Coordination of information materials development department - Development and optimization of information security processes related to the human factor (organization of training and skills training for employees/clients, content development, etc.) - Conducting employee and customer training (ERIELL, Severstal, YUM, Gazpromneft, Inter RAO, Novotrans, Norilsk Nickel, Rosneft, RoskosmosBank, SO UES, UDP RK, Belagroprombank, NSD, Sababa, Swisscom, Expcapital, X5 Retail Group, Yandex, etc.) - Development of product methodology and accompanying processes, internal instructions and product instructions for clients, creation of simulated attacks (phishing emails, websites, attachments, etc. + knowledge of HTML, CSS, JavaScript) and creation of training courses - Writing articles, research work in the field of social engineering, information security and psychology - Speaking at conferences (Antifraud Russia 2019, Bankit 2019, KREB 2019, IS CODE Sochi 2019, IS CODE Profi 2020, IS CODE Online 2020, Ural Forum 2020, SheLeadsTech.), communicating with customers - Drafting requests for developers and product development plan - Led lectures with S. Voldokhin in the AIS on Counteracting Social Engineering - Author of articles in the regular column "Social Engineering" in the "BIS Journal. Information Security of Banks"