Open to opportunities

Dana Oshakbay

@danaoshakbay

Chief IT Risk Manager and cybersecurity risk expert, translating ISO/NIST requirements into actionable risk registers and governance.

Italy

Message

What I'm looking for

I’m looking to grow in cybersecurity risk and governance, delivering practical ISO/NIST-aligned risk registers, clear executive reporting, and (where useful) AI-driven decision support for risk assessment and prioritization.

I’m a cybersecurity risk professional who bridges technical security topics and executive decision-making. As a lecturer of cybersecurity risk management, I delivered lectures and practical courses and supervised student research and practical projects in risk management.

In my roles as Chief IT Risk manager and Cyber Risk manager, I conducted comprehensive cyber risk assessments using NIST and ISO 27001, 27002, 27005, and COBIT/COBIT5, and I built and maintained information security/IT risk registers with risk assessment tools such as ISO 27005. I ensured compliance and governance with GDPR, CCPA, HIPAA, and DORA, and I reported complex technical risks in clear, actionable business language for executive leadership and the Board.

Experience

Work history, roles, and key accomplishments

Chief IT Risk Manager

JSC Halyk Bank

Jan 2024 - Jan 2025 (1 year)

Conducted comprehensive IT and information security risk assessments using NIST and ISO 27000-series standards, and maintained a corporate cybersecurity risk register. Ensured compliance with GDPR, CCPA, HIPAA, and DORA and reported risks to executives and the Board.

NIST COBIT GDPR CCPA HIPAA DORA Risk Assessment Jira Power BI IBM SAP ERP Risk Reporting

Cybersecurity Risk Management Lecturer

Astana IT University

Jan 2022 - Jan 2025 (3 years)

Delivered lectures and practical courses in cyber risk management. Supervised student research and practical cybersecurity projects.

cybersecurity risk management Cyber Risk Management Teaching

Cyber Risk Manager

JSC ForteBank

Jan 2021 - Jan 2024 (3 years)

Performed cyber risk assessments and security audit support, developing an information security/IT risk register aligned to ISO 27005. Developed an AI-enabled approach using TensorFlow and PyTorch to automate asset inventory discovery, risk identification, and predictive impact evaluation.

Security Audits Risk Register Risk Assessment IT Risk Python SQL TensorFlow PyTorch Machine Learning Asset Discovery Predictive Impact Evaluation Pandas NumPy GDPR EU AI Act CCPA

Cybersecurity Analyst (SOC)

JSC National Information Technologies

Jan 2019 - Jan 2021 (2 years)

Monitored security telemetry from SIEM, EDR, firewalls, and IDS/IPS to detect and triage potential incidents. Investigated alerts using QRadar and EDR tools, performed log/IOC analysis, and documented incident tickets and lessons learned.

SIEM EDR Firewalls IPS QRadar Triage Log Analysis Host and Process Examination