Benjamin Lee, After Career Break (Ex-Ciso, Ex-It Security Head) Email & Phone Number

Singapore

Singapore - Level 22, Manulife Tower, 8 Cross Street.

𝐑𝐞𝐚𝐬𝐨𝐧 𝐟𝐨𝐫 𝐥𝐞𝐚𝐯𝐢𝐧𝐠: Career break to support my son in his national exam preparation.1) Help create New Cybersecurity Services in Presales Package. Developed innovative cybersecurity solutions tailored to address emerging threats and improve organizational resilience. They were: a) SGD X revenue from a national fund management company in a New Zealand’s Island including reviews of identity and access management, backup and recovery management, security incident and response management, and ISO 27001 guidance, aimed to reduce 30% of organization’s risks.b) SGD X revenue for Azure cloud assessment project of an insurance company in Singapore before the launch of cloud migration.c) SaaS (software as a service) framework review of a logistics company in Malaysia.d) SGD X revenue for OT (Operational Technology) assessment, vulnerability assessment and penetration testing of a beverage company in Singapore and a science-based agricultural technology company in Switzerland.e) SASE (Security Access Service Edge) readiness review of a plastic manufacturing company in Australia before adopting full SASE suite of solutions. Each project generated an average of SGD X revenue.2) Risk Assessment & Penetration Test Over X projects, reviewed and implemented risk assessment and penetration test based on standards and guidelines to check compliance and managed risks, including: Government Security Standard: IM8 (Instruction Manual version 8), MAS (Monetary Authority of Singapore) technology risk management (TRM), ISO 27001, NIST, OWASP (Open Web Application Security Project), and PCI-DSS (Payment Card Industry).

Singapore

𝐑𝐞𝐚𝐬𝐨𝐧 𝐟𝐨𝐫 𝐥𝐞𝐚𝐯𝐢𝐧𝐠: Looking for growth while head-hunted by job agency.1) 𝐈𝐓 𝐒𝐭𝐫𝐚𝐭𝐞𝐠𝐢𝐞𝐬 𝐰𝐢𝐭𝐡 𝐤𝐞𝐲 𝐬𝐭𝐚𝐤𝐞𝐡𝐨𝐥𝐝𝐞𝐫𝐬. Aligned strategies with company's goals.2) 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 & 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭. Managed risks to ensure the company is protected at an adequate level, enforcing IT security standards. Ensured regular risk assessment, penetration testing and audit.3) 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐚𝐰𝐚𝐫𝐞𝐧𝐞𝐬𝐬 𝐩𝐫𝐨𝐠𝐫𝐚𝐦. Executed 4 cybersecurity awareness sessions, supporting phishing simulation exercises.4) 𝐆𝐑𝐂 (𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, 𝐑𝐢𝐬𝐤, 𝐚𝐧𝐝 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞). Utilized relevant standards and guidelines to check compliance and managed risks, including: Government Security Standard: IM8 (Instruction Manual version 8). Provided strategic advice on GRC to key stakeholders.5) 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐏𝐏𝐏 (𝐏𝐨𝐥𝐢𝐜𝐲, 𝐏𝐫𝐨𝐜𝐞𝐬𝐬, 𝐏𝐫𝐨𝐜𝐞𝐝𝐮𝐫𝐞) 𝐅𝐫𝐚𝐦𝐞𝐰𝐨𝐫𝐤. Enforced cybersecurity policies, processes, and procedures. 6) 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐈𝐧𝐜𝐢𝐝𝐞𝐧𝐭 𝐑𝐞𝐬𝐩𝐨𝐧𝐬𝐞 & 𝐅𝐨𝐫𝐞𝐧𝐬𝐢𝐜 𝐈𝐧𝐯𝐞𝐬𝐭𝐢𝐠𝐚𝐭𝐢𝐨𝐧. Managed day-to-day security incidents and vulnerabilities.

Singapore

𝐑𝐞𝐚𝐬𝐨𝐧 𝐟𝐨𝐫 𝐥𝐞𝐚𝐯𝐢𝐧𝐠: World-wide team restructuring & retrenchment (COVID).1) 𝐆𝐁𝐏 𝟏𝟎𝟎 𝐦𝐢𝐥𝐥𝐢𝐨𝐧 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞 𝐨𝐯𝐞𝐫 𝟑 𝐲𝐫 generated by providing presales to a major Telco in Asia. The services offered were multi-layered security defense, onsite managed security services, and a range of services including 13 security device types: IDM Oracle, IDM CyberArk, CheckPoint Firewalls, Cisco ASA Firewalls, Fortinet Firewalls, Cisco ASA SSL VPN, CheckPoint IPSec VPN, IPS on CheckPoint, Proxy BlueCoat, AV McAfee, AntiSpam Ironport (including AV), Certificate Management Microsoft PKI, and Nessus.2) 𝐒𝐆𝐃 𝟑𝟎 𝐦𝐢𝐥𝐥𝐢𝐨𝐧 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞 𝐟𝐨𝐫 𝟓 𝐲𝐫, was won from an Australian mining company with my presales support. The services offered were Managed Firewalls, IDS/IPS, Threat Monitoring, Zscaler Cloud, Akamai Prolexic DDOS Solution, FireEye ETP (Email Threat Prevention), and Mobile Express Remote Access.3) 𝐒𝐆𝐃 𝟏𝟎 𝐦𝐢𝐥𝐥𝐢𝐨𝐧 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞 𝐟𝐨𝐫 𝟕 𝐲𝐞𝐚𝐫𝐬, awarded by a lab service company in Australia for the provisioning of Managed Firewall & IPS (Checkpoint), SIEM, Threat Monitoring, and Zscaler, with my presales support.4) 𝐒𝐆𝐃 𝟏 𝐦𝐢𝐥𝐥𝐢𝐨𝐧 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞 𝐩𝐞𝐫 𝐲𝐞𝐚𝐫 was won from a broadband company in Australia, with the help of my presales support. The service offered was cybersecurity SOC, level 2 support.5) 𝐒𝐆𝐃 𝟏𝟎𝟎𝐊 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞 𝐩𝐞𝐫 𝐲𝐞𝐚𝐫 awarded for offering distributed denial of service mitigation services in the cloud, with my presales support. 6) 𝐌𝐚𝐧𝐚𝐠𝐞𝐝 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐒𝐞𝐫𝐯𝐢𝐜𝐞 (𝐌𝐒𝐒) 𝐒𝐮𝐛𝐣𝐞𝐜𝐭 𝐌𝐚𝐭𝐭𝐞𝐫 𝐄𝐱𝐩𝐞𝐫𝐭. Appointed as the only Subject Matter Expert for Managed Security Service (MSS) in Asia to provide presales. Advised and supported all 7 account managers, increasing the win chance of project opportunities by 10%, which equated to GBP 10 million per yr due to the significant revenue from managed security services.

Singapore

1) 𝐏𝐫𝐞𝐯𝐞𝐧𝐭𝐢𝐨𝐧 𝐨𝐟 𝐏𝐫𝐨𝐣𝐞𝐜𝐭 𝐋𝐨𝐬𝐬 𝐨𝐟 𝐚 $𝟏𝟐 𝐦𝐢𝐥𝐥𝐢𝐨𝐧 𝐚𝐧𝐧𝐮𝐚𝐥 𝐫𝐞𝐯𝐞𝐧𝐮𝐞. As a CISO, supported delivery of managed security services of device for a customer of 80 agencies in Asia, turning this unhappy customer into a satisfied one, and retaining a SGD 12 mil in annual revenue. Managed customer expectations, ensured timely delivery, and 𝐫𝐞𝐝𝐮𝐜𝐞𝐝 𝐜𝐨𝐦𝐩𝐥𝐚𝐢𝐧𝐭𝐬 𝐛𝐲 𝟑𝟎%. The service were single sign-on, end-point security, mail hygiene and network IPS.2) 𝐆𝐑𝐂 (𝐆𝐨𝐯𝐞𝐫𝐧𝐚𝐧𝐜𝐞, 𝐑𝐢𝐬𝐤, 𝐚𝐧𝐝 𝐂𝐨𝐦𝐩𝐥𝐢𝐚𝐧𝐜𝐞). Utilized relevant standards and guidelines to check compliance and managed risks, including: (Monetary Authority of Singapore) technology risk management (TRM), ISO 27001, NIST, OWASP (Open Web Application Security Project), PCI-DSS (Payment Card Industry). Collaborated closely with 5 teams: technical, legal, business units, account teams and partners to enforce GRC measures.3) 𝐄𝐧𝐝-𝐭𝐨-𝐞𝐧𝐝 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐟𝐨𝐫 𝐂𝐮𝐬𝐭𝐨𝐦𝐞𝐫. With assets valued at over SGD XX million dollars to protect, led end-to-end cybersecurity initiatives including incident response, and implementation of robust security controls.

Singapore

𝐑𝐞𝐚𝐬𝐨𝐧 𝐟𝐨𝐫 𝐥𝐞𝐚𝐯𝐢𝐧𝐠: World-wide team restructuring & retrenchment.1) 𝐓𝐞𝐚𝐦 𝐋𝐞𝐚𝐝 𝐨𝐟 𝐩𝐫𝐞𝐬𝐚𝐥𝐞𝐬 & 𝐝𝐞𝐥𝐢𝐯𝐞𝐫𝐲 𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐭𝐞𝐚𝐦𝐬 𝐢𝐧 𝐒'𝐩𝐨𝐫𝐞, overseeing cybersecurity presales and delivery teams. 2) Appointed as the 𝐒𝐎𝐂 𝐬𝐮𝐛𝐣𝐞𝐜𝐭 𝐦𝐚𝐭𝐭𝐞𝐫 𝐞𝐱𝐩𝐞𝐫𝐭 𝐢𝐧 𝐀𝐬𝐢𝐚. Engaged in SOC (Security Operation Centre) opportunities, starting from business dev, presales up to the delivery of SOC projects. 3) 𝐒𝐎𝐂 𝐂𝐨𝐧𝐬𝐮𝐥𝐭𝐚𝐭𝐢𝐨𝐧. Generated 𝐒𝐆𝐃 𝟔𝟓𝟎𝐊 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞. Provided presales & delivery for the following projects: a) An Agency in Asia. 𝐒𝐆𝐃𝟏𝟓𝟎𝐊 revenue. b) A Large Bank in S'pore. 𝐒𝐆𝐃𝟕𝟎𝐊 revenue. c) A Major Telco in China. 𝐒𝐆𝐃𝟏𝟓𝟎𝐊 revenue. d) A Major Telco in Singapore. 𝐒𝐆𝐃𝟖𝟎𝐊 revenue. e) A Major Conglomerate in Malaysia. 𝐒𝐆𝐃𝟐𝟎𝟎𝐊 revenue.4) 𝐑𝐢𝐬𝐤 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 & 𝐀𝐬𝐬𝐞𝐬𝐬𝐦𝐞𝐧𝐭 as “Entry Door” business. Generated 𝐒𝐆𝐃 𝟑𝟓𝟎𝐊 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞 through presales to delivery of numerous risk assessment & pentests for the following projects:a) A recruitment company in S'pore. USD 51K in revenue. PCI, Pentest.b) A global construction company in S'pore. USD 16K in rev for 1 yr. QualysGuard Scanning Svc.c) A bank in S'pore. SGD 80K in rev. Risk assessment of IT Operations, Host Review, Pen test.d) A financial technology company in S'pore. SGD 58K in rev. Network & Web App Pen Test, Host Audit Review, Mobile App Pen Test.e) A bank in Asia. SGD 72K in rev. Source code review with partner.f) A S'pore-based company that provides engineering, procurement, construction, & maintenance services in S'pore. Network Vul Assessment: SGD 13K in rev, Project Management for Forensic Investigation: SGD 3K in revenue.g) A Telco in S'pore. SGD 41K in rev. Cloud Pentest.5) 𝐒𝐨𝐮𝐫𝐜𝐞 𝐂𝐨𝐝𝐞 𝐑𝐞𝐯𝐢𝐞𝐰 𝐐𝐮𝐚𝐥𝐢𝐟𝐢𝐜𝐚𝐭𝐢𝐨𝐧 & 𝐄𝐱𝐞𝐜𝐮𝐭𝐢𝐨𝐧. Generated 𝐒𝐆𝐃 𝟏𝟑𝟎𝐊 𝐢𝐧 𝐫𝐞𝐯𝐞𝐧𝐮𝐞 by driving the project for a bank in S'pore.

𝐑𝐞𝐚𝐬𝐨𝐧 𝐟𝐨𝐫 𝐥𝐞𝐚𝐯𝐢𝐧𝐠: Looking for growth while head-hunted by job agency.Key Milestones:1. Catching a new virus and reported to vendor2. Reducing critical risks in GRC3. Reducing process risks4. Reducing operation risks5. Ensuring quick incident escalation when required6. Ensuring clear communication and reporting to stakeholdersSummarized Tasks of IT Security Operation Head, Group Manager, Asia (Sep 2005-Sep 2006):1. Overseeing IT security operations across Asia: Singapore, Malaysia, Thailand, Indonesia, Philippines, Hong Kong, Taiwan, Japan, South Korea and India2. Designing, developing, implementing & enforcing Standard Operation Procedures (SOP) across region3. Improving security baselines and posture of corporate security infrastructure4. Driving patch management and change management5. Ensuring security analysis and monitoring6. Executing security project initiatives across regions7. Ensuring business contingency planning (BCP) and continuity8. Executing incident handling and forensic investigation9. Reporting directly to CFO 10. Conducting security assessment and security product evaluation11. Performing project management for IT security projects across Asia12. Managing BAU (Business As Usual) operation13. Overseeing new IT security projects 14. Overseeing security management including:..... a. License Management..... b.Information Management..... c. Software Assurance ..... d. Vulnerability Management..... e. Event Management..... f. Malware Detection..... g. Asset Management..... h. Configuration Management..... i. Network Management..... j. Incident Management..... k. Patch Management..... l. QC ManagementSummarized Tasks of IT Security Consultant, Asia (Apr2001-Aug2005):1. Acting as a presales and postsales consultant2. Presenting solution proposal to external customers3. Deploying security projects4. Bringing new external customer logos

Summarized Tasks:1. Providing consultation in Public Key Infrastructure (PKI) area2. Conducting IT security assessment3. Performing application review4. Working closely with all other teams to manage end-to-end solutions5. Reviewing processes and procedures6. Enforcing security implementations