Experience

• 

  SBI Digital Markets

  • Singapore

  • Senior Vice President, Head of IT Security

    • Feb 2023 - Present
    • Singapore

• 

  StashAway

  • Singapore

  • Group Head Of Information Security

    • May 2021 - Jan 2023
    • Singapore

    Singapore, Malaysia, Hong Kong, Thailand, DubaiInformation Security- Information Security LeadershipPrepare Information Security Roadmap and PlansPrepare Information Security Budgeting- Security EngineeringEnsure controls are implemented and setting standards for the organization's security postureEvaluation of tooling for fit-for-purpose deployment in organization- Information Security AssuranceManage Security Assessment programs such as Bug Bounty, Penetration Testing, Security Assessment and Red TeamingManaging external and internal auditsCreating awareness on information securityRunning tabletop exercise- Information Security Defense and ResponseCreation of Incident Response procedureManaging MSS and monitoring of environment- IT Risk and GovernanceManage risk registerEnsure tech compliance with local regulations (e.g. MAS TRM)IT Service Desk- Asset Management- Software Management- Change ManagementGroup Data Protection Officer- Data protection policies- Data protection compliance with local laws and regulations

• 

  StarHub

  • Singapore

  • Manager, Cybersecurity Assurance

    • Dec 2020 - May 2021
    • Singapore

    • Support the creation and updating of standards and reference architectures. These reference architectures will provide direction and guidance on proper compliance with defined standards while ensuring StarHub is deploying secure infrastructure solutions.• Assist with infrastructure assessments and advise for proper security service design and implementation.• Ensures cyber security is addressed as a business issue across StarHub, provides overall coordination and management of all security activities within the company• Develops and maintains relationships with business partner organizations to understand their business requirements and advise on security solutions• Ensures security team participates in the secure system development lifecycle to ensure and verify security requirements and best practices are addressed in the entire project lifecycle.• Monitors changes in industry-relevant legislation and accreditation• Drive enterprise vulnerability management maturity including defining and tracking KPI metrics with IT peers• Drive vulnerability disclosure program including bounty hunter program• Drive executive table-top exercises, cybersecurity awareness and phishing simulation program• Drive Red Team program

• 

  SGX

  • Singapore
  • Financial Services
  • 700 & Above Employee

  • Assistant Vice President - Information Security (Risk Assurance & Red Teaming)

    • Jul 2020 - Dec 2020

    - Review design and solution to ensure that application/system design conforms to security best practices and security policy- Ensure security projects are delivered and implemented according to requirements- Ensure compliance with MAS TRM guidelines for systems built and proposed- Review firewall rule requests to ensure rules are opened on a need-to-basis and risk is justified- Perform annual/continuous review of firewall rules after implementation- Red Teaming scenario planning and engagement- Penetration Testing (planning, engagement, assessment, remediation)- Vulnerability Management (host VA, network VA, discovery)- Assessment/Triage framework for Pen Test & VA- User Awareness Training and Management- Participant of ABS SCCS Committee- Member of ABS Red Teaming Working Group

  • Assistant Vice President - Information Security （Security Engineering)

    • Feb 2019 - Jun 2020

    • Review design and solution to ensure that application/system design conforms to security best practices and security policy• Ensure security projects are delivered and implemented according to requirements• Ensure compliance with MAS TRM guidelines for systems built and proposed• Review firewall rule requests to ensure rules are opened on a need-to-basis and risk is justified• Perform annual/continuous review & remediation of firewall rules after implementation• User Awareness Training and Management• Deliver solution for DDoS & WAF protection (F5 Silverline/Akamai)• Domain management• Manage security team and tools, such as Symantec DCS, SEP, SIEM• Manage network taps/aggregator projects to ensure network points are tapped and logs are sent to IDS/IPS• Managed DarkTrace & Gigamon project implementation

  • Assistant Vice President - Software Delivery - Securities Post Trade

    • Jun 2015 - Feb 2019

    · Lead or support application development projects and system implementation· Support all phases of a project life cycle to implement technical solutions· Write and/or review functional, design and technical specifications· Design test cases and conduct testing· Code programs and review source codes· Manage and work with vendors for infrastructure setup and system deployment· Work closely with business and operational users, domain SMEs and vendors

• 

  Syniverse Technologies

  • United States
  • IT Services and IT Consulting
  • 700 & Above Employee

  • Technical Services Manager

    • Mar 2013 - Jun 2015

    • Managing Engineering Team in Singapore, taking care of development, implementation, support (Support Manager/Technical Manager/Project Manager)• Interview potential candidate for System Support Engineer• Interview potential candidate for Application Engineer• Resource arrangement for various platform support and new projects• Drafting functional specifications and requirements gathering for new projects• Ensure projects are delivered on time• Acquire acceptance sign off for completed projects• Ensure the successful completion of the application developed on schedule and quality with minimal deficiency.• Attend monthly operations meeting with customer to ensure customer support satisfaction and all problems logged meet SLA requirement• Handle platforms in other countries remotely and manage resources remotely and assign tasks to engineers working on customer site• Review maintenance contract with Sales and Legal• Review Scope of Work (SoW) documents to ensure that the scope of each project/maintenance is properly scoped• Work within project budget, increase operational efficiency• Train the team in terms of technical knowledge

  • Assistant Manager

    • Jul 2011 - Mar 2013

    • Managing Engineering Team in Singapore, taking care of development, implementation, support (Support Manager/Technical Manager/Project Manager)• Interview potential candidate for System Support Engineer• Interview potential candidate for Application Engineer• Resource arrangement for various platform support and new projects• Drafting functional specifications and requirements gathering for new projects• Ensure projects are delivered on time• Acquire acceptance sign off for completed projects• Ensure the successful completion of the application developed on schedule and quality with minimal deficiency.• Attend monthly operations meeting with customer to ensure customer support satisfaction and all problems logged meet SLA requirement• Handle platforms in other countries remotely and manage resources remotely and assign tasks to engineers working on customer site• Review maintenance contract with Sales and Legal• Review Scope of Work (SoW) documents to ensure that the scope of each project/maintenance is properly scoped• Work within project budget, increase operational efficiency• Train the team in terms of technical knowledge

  • Senior Engineer/Team Lead

    • Jan 2009 - Jul 2011

    • Manage DB Setup on SUN Cluster• Manage DB Setup on Linux HA Cluster• Performs software modules integration and testing, application and hardware stress testing• Ensure the successful setup of the EXCEL Switch configurations.• Maintenance and configuration of Telco switches, Cisco Switches, SUN Servers, Linux Servers, IVR System, Database and Windows Workstation• Planning and design of application logic flow• Troubleshooting problems and follow up with customer• Ensure the proper allocation of resources, tasks and schedule management for projects undertaken.• Involve in SDLC• Identify, document and perform acceptance testing for projects undertaken.• Provide training to customers on system flow and system maintenance• Provide Operation & Maintenance document for customer• Coach team on handling problems and troubleshooting skills• Arrange customer meeting for discussion on problem management• Handle 24 x 7 on call supporto Tier 3: Application Support Engineer III• To handle escalated case from Tier 2, lias with various department/teams for the fix to be provided• To manage the problem and ensure that it can be closed within the SLA• To understand on the escalated issue and provide a solution to both internal and external

  • Application/Software/Support Engineer

    • Apr 2005 - Jan 2009

    • Manage DB Setup on SUN Cluster• Manage DB Setup on Linux HA Cluster• Performs software modules integration and testing, application and hardware stress testing• Ensure the successful setup of the EXCEL Switch configurations.• Maintenance and configuration of Telco switches, Cisco Switches, SUN Servers, Linux Servers, IVR System, Database and Windows Workstation• Planning and design of application logic flow• Troubleshooting problems and follow up with customer• Ensure the proper allocation of resources, tasks and schedule management for projects undertaken.• Involve in SDLC• Identify, document and perform acceptance testing for projects undertaken.• Provide training to customers on system flow and system maintenance• Provide Operation & Maintenance document for customer• Coach team on handling problems and troubleshooting skills• Arrange customer meeting for discussion on problem management• Handle 24 x 7 on call supporto Tier 1: Application Support Engineer I• To log ticket for calls, gather logs, troubleshoot and confirm on problm• To lias with customer on issues, to perform re-simulation of problem• To lias with customer, perform testing after fix has been done to ensure fix is working• To lias with customer, to apply fix into system once UAT has been done with the customer• To provide Incident Report to customer to detail the issueo Tier 2: Application Support Engineer II• To handle escalated case from problem owner• To analyze logs to find the root cause and provide possible fix• To perform software fixes and ensure problem is fixed• To provide information to problem owner to enable problem owner to detail down the issue in the Incident Report