Andrei Drozdov is working as Senior Manager in Information Risk Management Group of KPMG Moscow.
Has graduated with Master of Science Degree (MSc) from Applied Mathematics in Moscow, Moscow State University named after M. V. Lomonosov.
Andrey has more than 30 years of professional experience as IT consultant and trainer in leading Russian companies and international organizations.
Andrei actively involved in professional associations: vice-president of Information Systems Audit and Control Association (ISACA) of Moscow Chapter, as expert of Russian Information Systems Security Professional Association (RISSPA), Association for Banking Information Security Standards (ABISS) and Association for Strategic Outsourcing (ASTRA).
Competencies include:
IT Audit within Financial Audits and Process Based Audits;
IT Due diligence as part of M&A and IPO;
IT processes maturity assessment based on CobiT;
ISO 27001 assessment and implementation;
SAS 70 attestations for service providers in financial sector;
Information security audit against Information Security Standard and Privacy requirements of Central Bank of Russia;
SOX reviews and implementation;
Information security standards and policies development;
Teaching on IT Governance and Information Security.
Teaching on IT Governance and Information Security.
Andrei's clients have been Central Bank of Russia, Central Bank of Azerbaijan, National Bank of Kazakhstan, Sberbank, VTB Group, Alfa Bank, Major German bank, Major Japanese bank, RaiffeisenBank, Renaissance Capital Bank, Gazprombank,, Citibank, URSA Bank, CSFB, Bank of America, TNK-BP, Lukoil, Metro Cash and Caryy, Severstal and others.
He has CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), ISACA – (Information Systems Audit and Control Association); CGEIT (Certified in the Governance of Enterprise IT); Certified auditor and trainer for the Central Bank of Russia Security Standard certification.