Alfred T. Email & Phone Number

Melbourne, Vic, Au

Melbourne, Vic, Au

• Oversight and development of technical security strategies for 3-year Security Program over 4 broad domains – Cybersecurity, ACSC Essential 8, Data Protection and Critical Infrastructure with action plans for 40 initiatives.• Developed rigorous approach to security portfolio prioritisation, to guide senior leadership team target investments towards high impact initiatives.• Designed and executed the strategy to uplift maturity level (ACSC Essential 8) to Level 3 • Risk remediation of more than 260 sites on 90 internet-facing servers identifying legacy platforms, critical vulnerabilities and ensuring all risks were mitigated through Rehost/Replatform/Retire, hardening and patch management. • Major uplift to policies, standards, guidelines per best practice/industry standard (cloud security, cryptography, Apsec, Network & System Security and other important Infosec Policies)• Integrated leading network attack/defence frameworks (MITRE ATT&CK, Cyber Kill Chain) to uplift incident response capability.• Identify areas where our security posture can be improved (especially through automation), and where possible implement those improvements • Served as technical SME on Cloud Security (AWS, GCP), Application Security, Windows and Information Risk Analysis and Management• Established proactive research capability to detect adversarial activities targeted at Vocus technology landscape as well as other digital risks (brand abuse, VIP exposure, cyber threat), sourcing from the widest range of intelligence including the dark web.

Melbourne, Vic, Au

Security Management• Started up greenfield Security Function, spearheading massive Security Program running 3 major security establishment projects – V1 (ISMS/policy stack and Security Operations, V2 (Identity Management and PAM) and V3 (Data Protection and DLP). • Managed diverse information security and security operations teams and led them through a challenging 18-months effort in rapidly assimilating the Security Program and operationalising into internal operations.• Delivered an enhanced IAM solution to provide automated, role-based access provisoning for high volume on-boarding to all Enterprise systems, Global SSO, RBAC, PAM and Identity Governance.• Implemented enterprise security framework that consist of strategically integrated elements of NIST CSF, ISO/IEC 27001, OWASP and ASD Essential 8.• Directed the incident response strategy and playbooks creation, establishing the Cyber Incident Response Team (CIRT) and moulded them into a rapid response cross-functional team.• Introduced Red-Team/Blue-Team attack simulation program to validate enterprise defence effectiveness. Security Consulting• SME providing guidance in Microsoft enterprise security, M365, Identity and authentication management (ADFS, LDAP, Kerberos, Identity federation), API security (API key, Basic auth, OAuth and OIDC) and Azure Security Services (Azure AD, MCAS, MS AD App Proxy, ATP, Defender, Sentinel).• Information security consulting for AWS production service and lead best practice implementation of: AWS KMS and Secrets Manager; Container security and credential automation and AWS Security Services (HSM, Guard Duty, VPC flow logs, Cloud Watch, Cloud Trail, KMS, Macie, Shield, and Security Groups)• Delivered measurable security posture improvements (M365 Secure score, AWS Security Hub/Stax/CIS benchmarks).• Developed and implemented new 3rd party due diligence system and assessment framework for ~50 local entities/vendors.

Uk, Australia, Spain, Chile, Poland, New Zealand, Hong Kong Sar, Türkiye, Brazil, Mexico, The Us, Middle East, Ireland, Saudi Arabia And India., Gb

• Build the new security operations team and security portfolio. Responsibilities included establishing key security functions: security operations, incident response, policy development, network security, identity and access management, security awareness, PCI-DSS compliance, risk management and application security. • Provided information security consulting engagements to projects covering the full spectrum of cyber and information security, security architecture, risk and compliance. • Worked with vendors and cross-organisationally to identify, evaluate, and test (pilot) technology solutions for future capabilities: DLP, endpoint detection and response (EDR), next generation firewalls, email security solutions (on-prem and Office 365), enterprise mobility management (EMM), network security tools, identity and access management, application security practices, cloud security tools, static and dynamic security testing tools.• Established IT Compliance strategy in line with best practices to ensure enterprise compliance with PCI-DSS, security policy (ISO 27002 based), APRA (CPS 231, 234), ASIC and privacy laws.

Uk, Australia, Spain, Chile, Poland, New Zealand, Hong Kong Sar, Türkiye, Brazil, Mexico, The Us, Middle East, Ireland, Saudi Arabia And India., Gb

• Managed the day-to-day activities through a team of technical specialists for the daily implementation and maintenance of the Core Systems environment that underpin mission critical Health Insurance systems. Implemented system improvements streamlined operations and optimised environment through automation and standardisation. • Project managed strategic Web Transformation project, delivering the technology environment for end-to-end Vignette content management system. Led multi-site team comprising architects, DBAs, network engineers, CMS administrator and middleware specialists, while delivering web site on time and budget in 6 months, ahead of original schedule parameters, driven by the Agile development methodology.

Victoria, 3800, Au

• Provide central, reliable IT infrastructure hosting 1000+ server fleet and 130 applications utilized by the different divisions comprising the Administration, Teaching as well as Research portfolios providing the business functions for the company. • Deployed security monitoring tool (Symantec’s ESM) on more than 600 UNIX and Linux servers using different provisioning methods. Established security baselines based on environments and regulations in ESM to automatically perform system security audit, send alerts, and create status reports.• Designed and deployed a solution for UNIX users’ identity and access management with Single Sign On (SSO) using multi-domain / multi-forest Microsoft AD 2008/R2 infrastructure as primary directory source. Used Microsoft Group Policy for configuration and user access management on UNIX clients. • Established the business case for multi-year technology refresh programme, identified project requirements, contact vendor sources, established project team and developed a viable /flexible project plan to accommodate steering committee changing criterion. Formulated sustainable end-to-end process for refurbishment which remains today. The technology predominately used was VMware, Oracle VM and Xen.

• Set up the program office defining the general project management framework to ensure consistent approach to managing business initiatives. Created the governance structure overseeing progress of projects, enforcing control over scope, change and realisation of benefits. Designed and established the procedures, templates and exception processes for management of risks and issues.• Built and position a competent operational and project team for the realization of the business strategic initiatives and operation of Singapore Airline global infrastructure. Oversee 40+ staff members as direct and indirect reports, defining the team structures to pursue two distinct streams of work comprising transformation projects and support to application projects. • Ongoing sustainment of 800 mission critical Windows/UNIX/Mainframe servers, 310 applications and over 14,000 workstations across 22 countries.• Led transformation program commencing with establishment of new data centre and transition of client’s operations to IBM managed services. Developed the high-level change management plan for the technical transformation program to drive dossier of 17 change projects. Introduction of roadmaps as a framework for guiding the transformation imperative and from the roadmap developed the full-scale project plans and Master Schedule. Transformation encapsulated broad range improvements across several technology domains: server and storage operations, data centre, high availability and recovery designs, global service desk establishment, premise computing operations (LAN, desktops), security architecture remediation, technology standardization, service management, network redesign and BCP improvements.• Evolution of provisioning model by the development of ‘Infrastructure-as-a-service’ offering unleashing several enablers: rapid provisioning of data centre resources, IT resource pooling coupled with PAYG flexibility and dynamic scaling to business dynamic requirements.

• Senior focal point for all of the client needs and responsibility to deliver enterprise solutions to support multi-year outsourced contracts.• Develop the full-scale project plans to assume complete responsibility of clients’ operations including data centre, voice and data networking, premise computing (desktop and LAN), application development and SAP implementation. • Identified business issues in common between stakeholders, respond to underlying need by recommending cost effective technology solutions. Delivered high quality outcomes that provided new business offering, process improvement and system integration: • BASF Asia Pacific- Implementation of fully managed service for fleet of 33 enterprise servers supporting SAP applications, departmental servers, e-commerce, data warehousing and regional mail servers. - Led project team to implement SAP 4.7 upgrade directing SAP system level install and re-platform to 3-tier client-server architecture. Managed the regional Lotus Notes implementation and rollout to 6000 mailboxes.• DaimlerChrysler Asia Pacific & Africa- Managed implementation of global Internet ordering system to significantly improve the new vehicle ordering process based on IBM Websphere platform. - Implemented SAP and hosting infrastructure to underpin new core business platform that were key enablers for the business transformation program to support new Wholesale business.• Singapore General Hospital, Tan Tock Sang Hospital, Eastern and Western Hospital Clusters- Managed full project life cycle for Infrastructure and Applications, migrations, technology refreshes and deployments to support the implementation of new SAP system.- Supported client's service improvement initiative directing integration of technologies and new workflows to deliver enhanced bed management which came to be regarded as the key enabler for reducing admission waiting time and improve efficiency of patient care.

Mba International Business

Bsc Computer Science (Hons), Computer Science