Alexander Shnaydruk

About Alexander Shnaydruk

Information Security and Compliance Manager with 8+ years of hands-on experience administering enterprise IT systems, access controls, and security compliance programs. Deep expertise in Active Directory, Microsoft 365, Entra ID (Azure AD), virtualization and cloud infrastructure. Proven track record leading ISO 27001 certification, coordinating audits across NERC CIP and IEC 62443 frameworks, and implementing identity and access management (IAM), SIEM, DLP, and network security programs. Skilled at translating complex security requirements into operational procedures and working cross-functionally with HR, Legal, Finance, and executive leadership. Certified Cybersecurity Practitioner (CSP), IEC 62443 Secure Software Development, ISO 27001 certified, PMP-trained, MBA.

Experience

1. Manager, IT and Cybersecurity

   NovaTech Automation

   Oct 2020 — Present · Bethlehem, PA, US

   Led ISO 27001 certification and maintained compliance with NIST 800-53 and ISO 9001; coordinated internal, external, and regulatory audits and prepared evidence packages in partnership with HR, Legal, and Finance- Spearheaded the IT workstream of a corporate divestiture involving the Process Control division sale; coordinated across acquiring company IT, external consultants, and internal teams to ensure seamless data migration, system separation, and asset transition- Developed and maintained security policies, IT procedures, and AI governance documentation — including acceptable use policies, shadow AI risk controls, data handling guardrails, and vendor due diligence criteria — with periodic reviews aligned to emerging regulations and risk posture- Managed the full vulnerability management lifecycle — quarterly scans and penetration testing — achieving a 95%+ resolution rate, reducing organizational exposure and supporting audit readiness- Deployed a SIEM for real-time threat detection and incident response; operationalized a DLP program to safeguard sensitive data and reduce unauthorized disclosure risk- Designed secure network architecture with segmented VLANs; managed enterprise firewalls, switches, and VPN to maintain a defensible security perimeter- Increased backup coverage from 70% to 100% across all organizational systems and introduced a cloud-to-cloud backup process, ensuring full data resilience and business continuity- Architected and administered the organization\'s full identity and cloud infrastructure — Active Directory (GPOs, permissions, hypervisor management), Entra ID synchronization, and Azure cloud resources — enforcing least-privilege and access recertification across all environments- Established an ITSM platform and knowledge base; implemented demand management, defined service metrics and internal SLAs, improving resolution times and service accountability.

Education

• Lehigh University College of Business

  Master of Business Administration (M.B.A.), Business Administration and Management, General

  2011 — 2013

• State University of Moldova

  Bachelor's degree, Physics and Computer Science

  2001 — 2006

• Lehigh University

  Summer program, International/Global Studies

Skills

• New Business Development
• Negotiation
• Marketing Management
• Market Analysis
• Product Management
• Global Business Development
• Executive Management
• Go-to-Market Strategy
• Strategic Partnerships
• Business Planning
• Operations Management
• International Business
• Management
• Strategic Consulting
• Management Consulting
• Strategy
• Competitive Analysis
• Contract Negotiation
• Start-Ups
• Crm
• Marketing
• Alternative Energy
• Product Launch
• Strategic Planning
• Project Management
• Business Analysis
• Corporate Development
• Business Strategy
• Business Development
• Emerging Markets
• Financial Analysis
• Outsourcing
• Valuation
• Engineering
• Marketing Research
• Mergers & Acquisitions
• Entrepreneurship
• Venture Capital
• Telecommunications
• Product Development