Andrii Garaschuk
About Andrii Garaschuk
Andrii Garaschuk is a Senior Security Engineer with extensive experience in information security, specializing in vendor risk assessment and people management. He has worked for several organizations, including Sift, Grammarly, and GlobalLogic, and holds a background in information security and project management.
Work at Sift
Andrii Garaschuk has been employed at Sift as a Senior Security Engineer since 2021. His role involves overseeing security measures and ensuring the protection of sensitive information within the organization. He works remotely from Ukraine, contributing to Sift's mission of providing secure solutions in the digital landscape.
Education and Expertise
Andrii completed the Kmbs Executive Development Program with a focus on Project Management. He studied Information Security at the National Aviation University from 2002 to 2007. Additionally, he pursued studies at ISC2, achieving GDPR certification for Security Professionals in 2018. His expertise encompasses Vendor Risk Assessment, Secure Software Development Lifecycle (S-SDLC), and DevSecOps.
Background in Information Security
Andrii Garaschuk has a diverse background in information security, having held various positions in the field. He worked at GlobalLogic as an Information Security Officer from 2011 to 2016 and later as the IT Security and SOC Head from 2016 to 2019. His experience also includes roles at ProCredit Bank as an Information Security Administrator and at Ощадбанк as a Network Security Specialist.
Professional Achievements
Throughout his career, Andrii has participated in significant initiatives, including the TUV SUD Ukraine ISO27001:2013 certification program. He has also held a position at Grammarly as a Security Operations TechLead/Manager from 2019 to 2021, where he contributed to enhancing the organization's security posture.
Skills in Cloud and AWS Security
Andrii possesses specialized skills in AWS Security and Cloud Security, which are critical in today's technology landscape. His knowledge in these areas supports his role in implementing robust security measures and managing risks associated with cloud-based services.