Alvin Cheung Email & Phone Number

London, GB

• Third Party Risk Management
• Zero Trust Assessment and Architecture
• IT Control Testing
• Regulatory Response and Remediation
• Data Protection and Data Loss Prevention (Endpoint, Network, CASB)
• CASB and Web-Filtering Deployment

• Taking a few months off to focus on myself. I wanted to put this out there to encourage people to not be afraid of taking care, talking about, and doing what they need to do to keep their lives healthy. I've been.
• Refocus my passions and my priorities
• Spend time with my loved ones and friends
• Build good, sustainable work habits
• Learn things I would not have had the time to do otherwise, at my own paceI don't personally see this as a sign of weakness, but as an opportunity to become better and smarter in my career so I can come back stronger.

Toronto, Ontario, CA

• Security architect responsible for strategy and roadmap development, budgeting, and solution architecture and implementation.
• Developed Zero Trust framework and target state architecture, including defining Zero Trust principles and strategy, identifying enterprise actors, threat/risk assessment for prioritization, hop-by-hop analysis.
• Designed and implemented a cloud WAF solution for 40+ domains, including defining function/non-functional requirements, vendor evaluation, solution architecture, migration/cutover/block mode method of procedure, and.
• Designed and implemented Cloud Access Security Broker, defining function/non-functional requirements, vendor evaluation, solution architecture, migration/cutover/block mode method of procedure, build/operational.
• Designed and implemented a Network Detection Response, defining function/non-functional requirements, vendor evaluation, solution architecture, identification of NDR network tap targets (hosts, subnets, segmentation.
• Designed and implemented a Bot Protection solution, including assessment/evaluation (requirements, threats, issues, considerations, dependencies), define required controls (cookie tracking, rate limiting thresholds.

Toronto, Toronto, CA

• End to end delivery lead for major transformations and large projects, spanning a wide range of disciplines including strategy, governance, risk management, and architecture. Strong focus on the financial sector.
• Led physical builds, target operating models, service delivery models, target state services, communication frameworks for financial crimes fusion centers
• Delivered cyber security strategies, multiyear roadmaps, organizational structures, and costing projections
• Performed digital crown jewels program establishment, including scoping, data flow mappings, enhanced controls development and assessments
• Implemented cyber risk management programs using three lines of defense, risk appetite/tolerance statements, risk and control libraries, threat modelling, and operationalization of risk management processes
• Performed fraud technical assessments, organization capability analysis, and fraud operations assessments

Toronto, Toronto, CA

Montreal, Quebec, CA

• Lead architect for implementation for firewalls, intrusion prevention systems, proxies, data-loss prevention, MPLS and wireless networks. Responsible for designing complex solutions, taking into consideration.
• Client facing consultant responsible for post-sales solution delivery, including engineering, design, and deployment of various security technologies
• Design, document, and deployed multiple security solutions for various vendors including Check Point, Websense (Proxy, Endpoint DLP, Network DLP), Juniper, Fortinet (Fortigate, Fortimanager, FortiAnalyzer, IPS.
• Delivered and executed strategies for firewall cutovers, DLP tuning, IPS tuning, server migrations, network zoning, change management, firewall governance, firewall optimization, firewall compliance remediation, cyber.

Skokie, Illinois, US

• NOC/SOC analyst that provided analysis and investigation of security events, tier two support, and professional services. Responsible for development of operational processes, troubleshooting complex firewall/network.
• Provided extensive troubleshooting for a wide range of security solutions from multiple vendors, including: Check Point, Juniper, Blue Coat, Sourcefire, Riverbed, and Fortinet. This includes issues such as LAN/WAN.
• Designed, deployed, and provided troubleshooting for Firewalls, IDP/IPS, Proxies, WAN Acceleration, Unified Threat Management (UTM) Solutions, Site-to-Site VPN, SSL/Endpoint VPN’s, SIEM, Routing/Switching solutions
• Provided Managed Service deployment and administration for several multinational clients, which includes change management, upgrades, backups, and troubleshooting for Check Point, Juniper, RSA, Sourcefire, Tipping.
• Provided Professional Services, which includes security solution design and implementation, documentation, upgrades, end-user training/knowledge transfer, lab design and setup, and network configurations
• Excellent documentation, project delivery, and project management skills for Managed Service deployments and Professional Service projects

Vancouver, British Columbia, CA

• Retail sales for wireless services and devices

• First level technical support and administration, responsible for triaging and troubleshooting a wide range of issues from infrastructure systems and networks to end-user machines and applications.
• Supported multiple clients from several verticals with specific procedures for each individual client, including manufacturing, entertainment, and research.
• Created and managed tickets through several IT service desk tools (iCare, BMC Remedy), ensuring that tickets are properly documented, escalated, and closed when required.
• Provided analysis of common trends among incidents, identifying urgency, communicability, and overall impact on business operations; aided in resolving critical incidents by alerting and informing the responsible.