Sergey K.

Director, Head of Group Cyber Security

Stuttgart, Germany

Experience

Jan 2024 - Present
1 year 8 months

Director Group Cybersecurity

Boerse Stuttgart Group

  • Establishing cyber security as a strategic business enabler
  • Implementing IAGM, SOC, SIEM, PAM, EDR, Cloudflare Zero Trust (ZTNA, CASB, DLP), including planning, tool or service selection, procurement and operation
  • Developing and executing the cloud security strategy (Azure, AWS, GCP) under regulatory requirements (DORA, NIST, ISO 27001) and zero trust architecture
  • Operating cyber security services: vulnerability management, pentesting, red/blue teaming, encryption, cloud security monitoring, PAM, hardening hybrid IT systems
  • Defining and implementing the cyber security framework & roadmap (on-prem, cloud, hybrid)
  • Building automated processes to increase efficiency (>30%) and audit readiness under §44 KWG
  • Driving efficiency: reducing costs (–15%) through service, provider and license optimization
  • Creating KPI/KRI dashboards for top management reporting
  • Chairing the Cyber Security Steering Board, coordinating local CISOs, embedding "security by design" in agile projects, including AI-based solutions
Jan 2021 - Dec 2024
4 years

Head of Cybersecurity

Mercedes-Benz Leasing Deutschland GmbH

  • Introducing the IT framework for the first line of defense
  • Implementing SOC, SIEM, pentests, vulnerability management (on-prem & Azure cloud), including planning, tool or service selection, procurement and operation
  • Establishing IT service continuity management processes
  • Building and leading Cyber Security Operations, ensuring regulatory compliance (BAIT, ZAIT)
  • Automating KPI-based application security reporting
  • Introducing DevSecOps practices
  • Securing AI-based internal portals
  • Leading cross-functional teams
Jan 2015 - Dec 2021
7 years

Manager IT-Security

Mercedes-Benz Bank AG

  • Leading IT security operations (BaFin/KWG §44, GDPR)
  • Implementing security projects
  • Providing security guidance for all IT-related projects in the company
  • Implementing next-gen firewalls, web proxies, vulnerability management
  • Establishing and leading IT security committee with reporting to the executive board
Jan 2008 - Dec 2015
8 years
Russian Federation

Head of IT and ISO

Mercedes-Benz Russia SAO

  • Establishing processes and responsibilities for IT governance, ITSM, EAM, service delivery
  • Implementing SAP security (SoD, SSO)
  • Developing and operating a custom IAGM system (requirements, development, operation)
  • Leading security architecture and infrastructure projects
  • Training on IT security & project management
  • Leading an information security improvement project (ISO 27002)
  • Setting up IT for three new joint venture companies
Jan 2006 - Dec 2008
3 years
Russian Federation

CIO

DaimlerChrysler Automotive Russia SAO

  • Leading IT strategy, planning, budgeting, contract management, team leadership
  • Executing the Chrysler carve-out – building the IT infrastructure and application-based setup for the new environment in Russia and migrating users and data
  • IT infrastructure projects: setting up infrastructure for new locations, building an in-house data center, including BCM/ITSCM framework
  • Establishing application landscapes and IT governance for new joint ventures Daimler/KAMAZ, Daimler/GAZ
Jan 2004 - Dec 2006
3 years
Russian Federation
Remote

IT Infrastructure Manager / Vice CIO

DaimlerChrysler Automotive Russia SAO

  • Implementation of IT standards
  • Development of infrastructure for remote offices
  • Outsourcing management
  • Cost and performance optimization
Jan 2002 - Dec 2004
3 years
Moscow, Russian Federation

System Administrator

DaimlerChrysler Automotive Russia SAO

  • IT operations at one location
  • Migration NT4.0 → Windows 2000, Novell → Active Directory
  • Building IT infrastructure (incl. data center) at the company's new central location: MB Plaza Moscow

Summary

Director of Cyber Security with over 20 years of experience developing, leading and optimizing IT and cyber security strategies. Proven track record in improving security process efficiency, meeting compliance requirements and delivering scalable IT and security solutions. Expert in security architecture, risk management, governance and cross-functional leadership.

Languages

Russian
Native
German
Advanced
English
Advanced

Education

Sep 1992 - Jun 2000

Beruni State Technical University

Bachelor · Electronics, Automation, Computer Science · Tashkent, Uzbekistan

Certifications & licenses

Certified Information Security Manager

Certified Information Systems Security Professional

Foundation Certificate in IT Service Management

Certified Information Security Architect

Daimler Corporate Academy & IT/QG

Need a freelancer? Find your match in seconds.
Try FRATCH GPT
More actions