Alvin Cheung Email & Phone Number

Toronto, On, Ca

London, Gb

• Third Party Risk Management• Zero Trust Assessment and Architecture• IT Control Testing• Regulatory Response and Remediation• Data Protection and Data Loss Prevention (Endpoint, Network, CASB)• CASB and Web-Filtering Deployment• Vendor selection and requirements

Taking a few months off to focus on myself. I wanted to put this out there to encourage people to not be afraid of taking care, talking about, and doing what they need to do to keep their lives healthy. I've been extremely fortunate to have had great leadership at every step of my career that has understood the importance of mental health and has been nothing but supportive. I'm very thankful to have had the privilege of working with them.I'm taking my time off to:• Refocus my passions and my priorities• Spend time with my loved ones and friends• Build good, sustainable work habits• Learn things I would not have had the time to do otherwise, at my own paceI don't personally see this as a sign of weakness, but as an opportunity to become better and smarter in my career so I can come back stronger and move further in my career.Take care of yourself and take care of others, we're all in this together! Cheers and hopefully see you in the new year! A

Toronto, Ontario, Ca

Security architect responsible for strategy and roadmap development, budgeting, and solution architecture and implementation.• Developed Zero Trust framework and target state architecture, including defining Zero Trust principles and strategy, identifying enterprise actors, threat/risk assessment for prioritization, hop-by-hop analysis, detailed target state design, costing estimates, and roadmaps• Designed and implemented a cloud WAF solution for 40+ domains, including defining function/non-functional requirements, vendor evaluation, solution architecture, migration/cutover/block mode method of procedure, and build/operational documentation. All domains were successfully migrated and in blocking mode.• Designed and implemented Cloud Access Security Broker, defining function/non-functional requirements, vendor evaluation, solution architecture, migration/cutover/block mode method of procedure, build/operational documentation, defining SaaS enforcement policy, integration with SaaS services, and strategic evaluation of potential future SASE capabilities. • Designed and implemented a Network Detection Response, defining function/non-functional requirements, vendor evaluation, solution architecture, identification of NDR network tap targets (hosts, subnets, segmentation points), and ServiceNow asset data integration. • Designed and implemented a Bot Protection solution, including assessment/evaluation (requirements, threats, issues, considerations, dependencies), define required controls (cookie tracking, rate limiting thresholds, captcha), and deployment.

Toronto, Toronto, Ca

End to end delivery lead for major transformations and large projects, spanning a wide range of disciplines including strategy, governance, risk management, and architecture. Strong focus on the financial sector, retail, and utilities. Developed new practice capabilities, including digital crown jewels programs, fusion centers, and zero trust/micro segmentation. Executive level deliverables and presentations.• Led physical builds, target operating models, service delivery models, target state services, communication frameworks for financial crimes fusion centers• Delivered cyber security strategies, multiyear roadmaps, organizational structures, and costing projections• Performed digital crown jewels program establishment, including scoping, data flow mappings, enhanced controls development and assessments• Implemented cyber risk management programs using three lines of defense, risk appetite/tolerance statements, risk and control libraries, threat modelling, and operationalization of risk management processes• Performed fraud technical assessments, organization capability analysis, and fraud operations assessments

Toronto, Toronto, Ca

Montreal, Quebec, Ca

Lead architect for implementation for firewalls, intrusion prevention systems, proxies, data-loss prevention, MPLS and wireless networks. Responsible for designing complex solutions, taking into consideration technical/business requirements, security effectiveness, migration/cutover strategies, and operationalization.• Client facing consultant responsible for post-sales solution delivery, including engineering, design, and deployment of various security technologies• Design, document, and deployed multiple security solutions for various vendors including Check Point, Websense (Proxy, Endpoint DLP, Network DLP), Juniper, Fortinet (Fortigate, Fortimanager, FortiAnalyzer, IPS, Antivirus, Web-Filtering, SSL VPN), and Tufin (SecureChange, SecureTrack)• Delivered and executed strategies for firewall cutovers, DLP tuning, IPS tuning, server migrations, network zoning, change management, firewall governance, firewall optimization, firewall compliance remediation, cyber frameworks

Skokie, Illinois, Us

NOC/SOC analyst that provided analysis and investigation of security events, tier two support, and professional services. Responsible for development of operational processes, troubleshooting complex firewall/network issues, preparing method of procedure documents for upgrades/migrations/cutovers, and implementation of security solutions.• Provided extensive troubleshooting for a wide range of security solutions from multiple vendors, including: Check Point, Juniper, Blue Coat, Sourcefire, Riverbed, and Fortinet. This includes issues such as LAN/WAN, clustering, configuration/administration, upgrades, bug fixes, health checks, root cause analysis, and VPN’s.• Designed, deployed, and provided troubleshooting for Firewalls, IDP/IPS, Proxies, WAN Acceleration, Unified Threat Management (UTM) Solutions, Site-to-Site VPN, SSL/Endpoint VPN’s, SIEM, Routing/Switching solutions• Provided Managed Service deployment and administration for several multinational clients, which includes change management, upgrades, backups, and troubleshooting for Check Point, Juniper, RSA, Sourcefire, Tipping Point, and Q1 Lab products• Provided Professional Services, which includes security solution design and implementation, documentation, upgrades, end-user training/knowledge transfer, lab design and setup, and network configurations• Excellent documentation, project delivery, and project management skills for Managed Service deployments and Professional Service projects

Vancouver, British Columbia, Ca

• Retail sales for wireless services and devices

• First level technical support and administration, responsible for triaging and troubleshooting a wide range of issues from infrastructure systems and networks to end-user machines and applications.• Supported multiple clients from several verticals with specific procedures for each individual client, including manufacturing, entertainment, and research.• Created and managed tickets through several IT service desk tools (iCare, BMC Remedy), ensuring that tickets are properly documented, escalated, and closed when required.• Provided analysis of common trends among incidents, identifying urgency, communicability, and overall impact on business operations; aided in resolving critical incidents by alerting and informing the responsible support teams.