Duc Nguyen Email & Phone Number

Hcmc

- Managed professional services team to provide world-class cybersecurity services for many banking, fintech, government client engagements.- Partner with prominent clients and help them solve hard cybersecurity problems- Coach and mentor junior resources in improving their technical and soft skills- Provide quality assurance oversight across cybersecurity services delivery from scheduling to deliverables- Enhance, improve, and streamline existing cybersecurity service line offerings- Help define, create, and rollout new cybersecurity service line offerings- Identify and communicate additional customer needs based on engagement results- Provide technical input during the sales engagement scoping process

- Chaired the cybersecurity working group to strategize security initiatives on the base.- Build and maintain an effective national cyberspace incident response system.- Implement a cyber-risk management program for protection of national critical infrastructure.- Developed core cybersecurity course and traveled extensively throughout Vietnam to provide onsite cybersecurity training for over 1000+ national cybersecurity experts from 63 provinces & cities.

Ho Chi Minh City, Ho Chi Minh City, Vietnam

- Lead and build ACB Cybersecurity Team with Lean Startup Philosophy.- Supervises the activity of the ACB Cyber Security Team. Recruits, hires, trains, assesses the staffs and scale up cyber team to >5% of IT Division's FTEs.- Cultivate and maintain effective relationships with relevant external entities, such as SBV and law enforcement agencies, regulatory agencies, and private sector counterparts.- Work effectively with leadership and other stakeholders such as Engineering Team, Procurement, Finance, IT, OP, and Legal to address security requirements, any potential concerns.- Partner with internal Operation Risk Committee to enhance programs supporting operations.- Directed cost-effective process and technology improvements, reducing endpoint attack surface by >90%.- Launch Bug Bounty Program /Red-Team/Blue-Team programs to validate enterprise defense effectiveness.- Established application security practice, incorporating threat modeling and secure coding best practices into enterprise SDLC and project management lifecycles.- Launched cross-functional Cyber Security Champions organization, creating career paths in security for technologists, and coordinating activities across IT operations, architecture, engineering, and development.

Vietnam

- Consulted on baseline assessments, strategic vision, and gap analyses for complex enterprise information security programs. Produced executive roadmaps for continual improvement in teams, technology, and processes. Implementation of these security strategies resulted in increased ability to withstand cyber attacks, as measured by annual sophisticated attack simulations.- Translated complex technical security issues into the language of business risk and provided guidance on security assessments, governance, and incident response.- Planning and executing cybersecurity assessments on a range of targets - primarily within AWS architecture, Fintech platform (PayNow, Payoo App, PayTouch, PayooMPOS, POS system)- Perform network, web and mobile application testing, source code reviews, threat analysis, red team operations and social-engineering assessments to evaluate VietUnion's ability to prevent, detect, and respond to sophisticated adversaries. - Consistently identified critical technical and procedural issues with the potential to expose millions of payment cards and customer PII records with possibly catastrophic impact to the client’s bottom line.- Worked directly with members of the executive team and board, including the CEO, CTO and legal counsel of multiple organizations.

Vietnam

- Manage an cybersecurity department responsible for 5 remote offices and 126+ transaction office.- Oversee IT security system upgrades, change management, and security enhancements.- Act as advisor to Board of Directors on IT security and compliancy mandates.- Provide IT security mentorship, guidance, and personnel assessments to direct reports.- Prepare internal penetration test plans for critical infrastructure such as Corebank, Internet Banking, Mobile Application, ATM Infrastructure, POS, Card Centre.- Leads the design, implementation, operation and maintenance of the PCI DSS.- Leads suitable cybersecurity awareness, training and educational activities, information security risk assessments and controls selection activities.

- Lead a team of 10 security engineers and researchers- Perform many various penetration test projects: Network, Web App, Mobile App, Cloud Platforms- Research on security technologies with focus on end-point security, multi-factor authentication, access control, information risk management, physical security - Responsible for product security testing by implementing a test automation solution- Provide IT security training with SANS Institute & EC-Council- Product security implementation such as CheckPoint, Nokia, Cisco, IBM ISS, Trend Micro, McAfee, Entrust, RSA, VASCO