Vyrhak Sath

- Risk Management: Conducted comprehensive risk assessments and implemented and monitored information risk treatment plans to ensure effective mitigation and compliance.

- Developed, updated, and reviewed security profiles for a defined scope of approximately 50 assets, including application context analysis, assessment of confidentiality, integrity, and availability (CIA) criteria, compliance verification with existing security controls, and interpretation of IT architecture diagrams. - Conducted comprehensive security analyses for assets across corporate and international projects, assessing operational contexts, potential threats, vulnerabilities, and specific security requirements. Reviewed architecture diagrams to identify weak points and security gaps. - Performed risk analyses based on asset security profiles, including the creation and management of risk records in ServiceNow (SNOW) — documenting risk descriptions, evaluating likelihood and impact, defining acceptance or mitigation strategies, and tracking risk remediation activities. - Validated security measures through audits to ensure the effective implementation of technical and organizational controls, including the review and analysis of supporting evidence to confirm compliance with internal and regulatory standards.

- Security Project Management: Managed an average of 20 security and compliance projects per month, covering both internal initiatives (deployment of Wallix bastion for administrators, Windows/Linux server upgrades, and database integrations) and external projects (secure deployment of SaaS solutions and establishment of secure data exchange flows). - Security Integration in Projects: Reviewed and analyzed project deliverables to validate security compliance, including penetration test reports, code reviews, and infrastructure and web vulnerability scan results. - Governance and Policy Alignment: Ensured alignment between Group security policies and operational business requirements. Conducted reviews and approvals of architecture diagrams and data flow matrices to verify consistency and compliance. - Penetration Testing Coordination: Planned and coordinated penetration testing campaigns with the Group’s internal pentest team. Oversaw remediation activities, conducting bi-weekly and monthly reviews with technical teams until all vulnerabilities were resolved. - Risk Management: Performed risk analyses based on the EBIOS 2010 methodology, and implemented and tracked information risk treatment plans through regular follow-ups until complete resolution. - Third-Party Cybersecurity Assessment: Evaluated the Security Assurance Plans (SAPs) of external partners to assess and improve their cybersecurity maturity. - Documentation and Process Management: Maintained and structured IT security documentation, cataloging procedures and security processes within the Security Management System (SMSI/ISMS) to ensure consistency and traceability.

- Risk Management: Conducted comprehensive risk analyses, implemented and monitored information risk treatment plans to ensure alignment with organizational security objectives. - Documentation & Governance: Managed and maintained IT security documentation, referencing operational procedures and processes within the Information Security Management System (ISMS). - Security Performance (KPI): Contributed to the definition, measurement, and tracking of key performance indicators to assess and enhance the organization’s security posture. - Disaster Recovery Planning (DRP): Ensured the effective execution and regular testing of the IT disaster recovery plan, including documentation updates and progress tracking. - Audits & Technical Oversight: Conducted on-site audits in data centers and technical facilities, coordinated penetration testing activities, and scheduled vulnerability scans to identify and mitigate risks. - Technology & Threat Intelligence: Maintained an active security watch on emerging technologies, vulnerabilities, and threats, while overseeing continuous improvement initiatives for security products and processes.

- Installed, configured, and maintained IT infrastructures across multiple Windows environments (7, 8, 8.1, and 10). - Administered Windows Server platforms (2003, 2008, 2012 R2, 2016), ensuring stability, performance, and security. - Managed backup operations using Veeam, Cobian, Backup Exec, and Windows Backup, with regular integrity and recovery tests. - Implemented and supported VoIP telephony solutions, enhancing communication efficiency across sites. - Managed corporate email systems with Microsoft Exchange (2013, 2016) and Office 365, including configuration, troubleshooting, and security enforcement. - Administered endpoint protection using Kaspersky Endpoint Security Cloud and managed Mailinblack anti-spam solutions. - Installed, configured, and maintained network and security hardware, including Fortinet, Zyxel, Synology, Ubiquiti, DrayTek, and Sophos devices.

- Provided daily user support and issue resolution, ensuring minimal downtime and optimal system performance. - Configured, maintained, and monitored IT infrastructure and network systems to ensure reliability and security.

- On-site installation, maintenance, and troubleshooting of Pointex POS software and cash register systems, ensuring operational continuity and client satisfaction. - Remote assistance and phone support for end users, including incident diagnosis, resolution, and technical guidance. - Configuration and setup of wired and wireless networks, optimizing connectivity and security. - Client training on the use and administration of point-of-sale (POS) systems. - Preparation, deployment, and configuration of IT infrastructures for clients, including system imaging, RAID setup, and hardware assembly and testing. - Installation of network cabling, coin-operated payment machines, and video surveillance systems, ensuring compliance and proper functionality. Additional responsibilities: - IT asset management and documentation. - Maintenance of internal and client servers, including performance monitoring and updates. - Incident management and problem resolution, with follow-up and reporting. - Inventory and stock management, including hardware preparation and logistics coordination.