• Operationso Provides regional security operations monitoring, investigation and support.o Perform L2 cyber security incident response and analysis, supporting HQ SOCo Perform and support day to day operations for email security and SASE with the following products i.e. Cloud Cisco ESA, Trellix ETP, Netskope SASE.o Revamp and enhance existing vulnerability management process and reporting.o Operate and manage vulnerability management.• Engineering o Enhance alert and reporting through the use of power automate and Microsoft purview to automate process of alerting and reporting for detected suspected data leakageo Design, test and migrate traditional endpoint ATP to cloud Microsoft defender for endpointo Migrating existing device control solutions to crowdstrike.

• Lead a team of AIEs (Infocomm Security Consultants)and outsourced service providers to provide essential enterprise level end Infocomm Security services to Public Service agencies.• Identify and execute new initiatives/enhancements that result in innovative use of Infocomm Security technologies to meet the needs of forward-looking Public Service agencies.• Identify opportunities to optimize delivery and achieve standardization of Infocomm Security services across Public Service agencies to reduce operations overheads and achieve greater satisfaction of Infocomm Security services.• Drive, manage and deliver projects to upkeep, strengthen or create new Infocomm Security services to enhance service satisfaction and delivery.• Subject matter expert on Infocomm Security technologies to coach and mentor Infocomm Security Consultants through new and routine tasks.• Oversee the competency development of Infocomm Security Consultants according to the training and competency development roadmap established.• Manage and track vulnerability findings in organization.• Support onboarding of PIAM (Cyberark solution)

• Review and enforce information security policy, standardsand guidelines for IT business application and infrastructure projects based on bank’s standards and MAS TRM• Identify IT security risks including IT business application and infrastructure projects• Conduct security assessments for business application, infrastructure projects and third-party service providers

Project Role: Service Delivery Manager/Infra Lead/Change and Patch ManagerRole Description:Managing and overseeing operations, service deliverable and security governance in government SOC project. Assisting the Operations Manager in leading the Infra Operations and governance, risk and compliance aspect. Managing IT Service Management of the projectAccomplishments● Overseeing and managing the project’s system infrastructure and its operations● Leading a team of infra ops in managing and maintaining project system infrastructure.● Managing risk and maintaining system compliance based on IM8 policy, CIS control and project system benchmark. o Lead a vulnerability management team o Perform monthly vulnerability assessment using tools (Tenable) o Perform monthly vulnerability remediation based on findings and vulnerability rating. o Work with project’s IT security team to perform risk assessment. o Tracking of system’s risk to perform mitigation or to seek acceptance. o Maintaining and updating hardening benchmark documentation o Work with external auditor in performing host security review and vulnerability assessment annually o Review and assess annual audit findings and perform remediation● Managing and escalating IT security/System incident.● Managing the service levels and delivery of contractual deliverable.● Managing Project’s IT Service Management o Incident Management o Service Request Management o Change Management o Patch Management● Drafting project operations documentation

Manage and run operations for whole of government endpoint protection (endpoint antivirus).Accomplishments● Deliver yearly project’s contractual deliverables promptly.● Ensured operations service level agreement are met.● Manage a team of operations personnel.● Manage and response to incident (user/infrastructure based).● Arrange and conduct annual training for end user technical manager.

Undertake proof of concept, trial and system implementation of infocomm products. Actively participate in solutioning to support pre-sales, service fulfillment and post-sales activities. Took up project manage role in projects, interface with both clients and product principal and ensuring on-time delivery of services. Accomplishments ● Assisted in managing and deliver secure data center hosting for government project. ● Managed and deliver island wide NGNBN installation project. ● Experienced in setup and support of mobile applicationserver in enterprise environment. ● Participate in government project tender bidding. Involved in equipment sourcing and documentation. Project was awarded to Certis CISCO. ● Participated in GovWare 2016 exhibition, showcasing Quann Security Innovation Lab on digital identity concept.

System and user support. Server and network maintenance. Feasibility studies. Create and maintaining website. Provide 24/7 support forsystems and network. Routine data backup.Work under SAF for 4 years under the IT department (Network) as an assistant engineer. Mainly doing O&S for several projects which consist of IBM SAN/NAS Storage, F5 BIG-IP,Oracle 10g database, HP Proliant Server, IBM Servers, VMWare, CISCO (Catalyst Switch 2950, 6500 series, Router 2900 series). Lead a feasibiility studies to optimize server roomspace. Deals with maintenance contract with vendors. Create and maintain web sites for the formation. Have experience in remote sites supports and maintenance. Part of the unitsafety committee which ensures workplace safety.