Assel Ucoklar

Product Development (GRC Software) Define and lead the product roadmap for GRC software based on market needs and regulatory trends. Coordinate with engineering teams to build, test, and release product features. Ensure the product aligns with compliance frameworks (e.g., ISO 27001, NIST, GDPR, SOC 2). Gather feedback from clients to improve the product continuously. Prioritize product features and backlog based on impact, ROI, and technical feasibility. Define and monitor KPIs for product success (e.g., user adoption, retention, uptime). Sales Leadership Develop sales strategy and pricing models for GRC offerings. Identify key customer segments and build go-to-market plans for each. Build and manage a sales pipeline; track CRM activities. Lead demos, presentations, and contract negotiations with clients. Marketing Leadership Define the marketing strategy and messaging for the GRC platform. Oversee content creation: whitepapers, case studies, thought leadership, SEO articles. Own product positioning, brand voice, and competitive differentiation. Represent the company at industry events, webinars, and panels. Collaborate with design and development on the website and product UX messaging.

- Development Information Security strategy in the company - Leading Information security projects in different companies (Government, Oil and Gaz industry, Financial) - Due diligence - Ensure security policies and standards are integrated into the business. - Perform operational and IS controls, COB and Tech controls in business processes over the projects. - Projects control under implementation IS, COB into all processes, products, systems and services - Information Security Risk projects leading - Technology controls process optimization - Internal Audit projects leading - Regulatory Risk and control, compliance projects - Development and Holding presentation, Cybergames and trainings - BIA, BRP, CMP, FT and DoA testing - Problem and Incident Management - Coordinate continuity of business planning projects - Develop new business initiatives as per user requirements - Direct and develop initiatives for service improvement and enhanced operational efficiency

IS&COB area supervising 25 people  Audit and control in Information Security area  Supervising and management Cyber & Information Security department (36 people), IS and IT risk division (7 people)  Information Security audit  Leading Information Security projects (SIEM, PAM, Perimetr Security, Strategy, Audit, Change control, Antivirus, IPS/IDS, GRC)  Business & IT continuity area During my work in Kaspi around 20 information security projects has been done, division grow from 9 till 36 people. Level of information security processes was raised from 1 till 4.

Ensure security policies and standards are integrated into the business. Perform operational and IS controls, COB and Tech controls in business processes. Control under implementation IS, COB into all processes, products, systems and services over the bank Administer monitoring techniques/procedures for detecting, reporting and investigating security breaches Verification of process ETM Verification of IS for third parties Verification of process Ethical Hacking Risk determination and verification human resources politics Technology controls process optimization Internal Audit Risk and Controls Regulatory Risk and control, Regulatory legislation Development and Holding presentation and trainings Analyze Information received from regional supervisors and regulatory institutions regarding IS and COB and access impacts to the bank activities Ensure that development, testing and installation of new systems/software products are performed in a controlled manner and fully documented in according to bank standards Coordinate development of technology-related issues and actively follow-up with departments on pending items BIA, BRP, CMP, FT and DoA testing Development and introduction continuity of business plan Supervise and train technology controls specialist Coordinate continuity of business planning, provide reports on status Effective working relationship with senior business managers for all Citi businesses Develop a coordinated strategy for the IS and Technology controls Coordinate annual vulnerability assessment and manage implementation of findings Develop new business specifications as per user requirements Direct and develop initiatives for service improvement and enhanced operational efficiency Work closely with Client Management, Data Center, Infrastructure Development (Engineering projects) and Regional Operations teams related to IS and COB aspects Problem and Incident Management Working in a heavily controls-focused environment

Information Security and Continuity of Business areas  Ensure security policies and standards are integrated into the business  Perform operational and information security controls in business processes  Control under introduction Information Security into all processes, products, systems and services over the bank  Coordination bank activities related to continuity of business  Provide monthly reports on status of Information Security program  Administer monitoring techniques/procedures for detecting, reporting and investigating security breaches  Control under conducting bank controls risk verification  Verification of process electronic transferring information  Verification of information security for third parties  Verification of process Ethical Hacking  Risk determination and verification human resources politics

 International correspondence  Database development  Development and introduction new methods, conclusion of contracts  Assembling maintenance and repair of operational systems