Open to opportunities

Dima S

@dmytro_senchenko

CISO at a payment company in Kyiv. I run PCI DSS, security policy, and risk programs, with a background in ISO 27001, SIEM, and incident response.

Ukraine

Message

Information security lead based in Kyiv, with more than 20 years in security and IT. Open to remote roles and to additional security projects alongside a primary job.

I currently work at a payment company, where I maintain the security policy and internal standards, assess threats and risks, investigate incidents, and lead PCI DSS certification, including continuity and recovery. Previously I was a senior security specialist at a telecommunications company, led information security at an energy company through ISO 27001, and worked as a security analyst at Intellias on SIEM, McAfee, and security monitoring.

I also ran IT and security at Trans-Agent, including a freight accounting system, CRM, and Telegram bots, and spent eight years as a lead security engineer at the Information Center of the Ministry of Justice of Ukraine.

Day to day I use QRadar, Wazuh, Splunk, Check Point, Fortinet, CrowdStrike, Suricata, Nessus, Qualys, and Zabbix. I build Python and Django tools with AI modules for automation, analytics, and assistants. Training includes PCI DSS 4.0, ISO 27001 internal auditor (Bureau Veritas), GDPR Data Protection Leader, and Cisco CCNA.

Experience

Work history, roles, and key accomplishments

Current

CISO

Current

Payment service company

Feb 2024 - Present (2 years 8 months)

I update the information security policy and internal standards, assess threats and risks, and put prevention measures in place. I investigate security violations and lead PCI DSS certification projects, including business continuity and disaster recovery.

Senior Security Specialist

Ukrainian telecommunications company

Feb 2023 - Feb 2024 (1 year)

I protected company information with organizational and technical controls, assessed security threats, and monitored security systems. I worked to prevent data leaks, investigated security violations, and automated how access rights were granted.

Independent Project

Personal project

Jul 2022 - Jan 2023 (6 months)

Between roles I worked on my own project in information security and process automation.

Head of Information Security

Energy company

Dec 2021 - Jun 2022 (6 months)

I led information security for an energy company: internal security documents, an ISO 27001 certification project, and compliance across departments. I managed vulnerabilities, joined incident investigations, and supported antivirus, DLP, firewall, IDS/IPS, and SIEM systems.

IT Manager

Trans-Agent LTD

Jul 2020 - Nov 2021 (1 year 4 months)

I managed information security and the company IT infrastructure. I deployed and improved the CRM and Telegram bots, and ran digital marketing across SEO, SMM, and Google Ads.

Security Analyst

Intellias

Aug 2019 - Jul 2020 (11 months)

Security analyst at Intellias. I administered McAfee, ran SIEM, and monitored corporate networks for weaknesses. I built alerts and dashboards, improved security procedures, and was the first contact for security questions.

IT Specialist

Trans-Agent LTD

Nov 2013 - Aug 2019 (5 years 9 months)

I built and rolled out an automated freight accounting system, ran the company IT infrastructure, and put an information security management system in place. I also ran digital marketing.

Lead Security Engineer

Information Center, Ministry of Justice of Ukraine

Jul 2005 - Nov 2013 (8 years 4 months)

I audited information security and wrote security procedures for the Information Center of the Ministry of Justice of Ukraine. I managed vulnerabilities and incident investigations, and operated firewalls, IDS/IPS, and Cisco SIEM, plus LAN routing, monitoring, antivirus, and DLP on Windows and FreeBSD.